功能描述

macOS 桌面控制工具。截屏、进程管理、系统信息、剪贴板、应用控制。macOS desktop control via native tools (screencapture, ps, AppleScript). 仅支持 macOS。

使用说明 (SKILL.md)

macOS Desktop Control

Name: Macos Desktop Control
Author: asa-zhang

macOS 原生桌面控制工具，无需额外依赖即可使用核心功能。

🚀 快速开始

基础命令（无需依赖）

# 截屏
bash scripts/screenshot.sh

# 进程列表
bash scripts/processes.sh

# 系统信息
bash scripts/system_info.sh

# 剪贴板读取
bash scripts/clipboard.sh get

# 剪贴板写入
bash scripts/clipboard.sh set "要复制的文字"

进阶命令（需要 pyautogui）✅

# 安装依赖
pip3 install --user --break-system-packages pyautogui pyscreeze pillow psutil

# 鼠标位置
python3 scripts/desktop_ctrl.py mouse position

# 鼠标移动
python3 scripts/desktop_ctrl.py mouse move 500 300

# 鼠标点击
python3 scripts/desktop_ctrl.py mouse click 500 300

# 键盘输入
python3 scripts/desktop_ctrl.py keyboard type "Hello"

# 快捷键（Cmd+C）
python3 scripts/desktop_ctrl.py keyboard hotkey command c

⚠️ 重要: 需要授予辅助功能权限！

bash scripts/check_permissions.sh

📋 命令速查

命令	功能	依赖	权限
`screenshot`	截屏	无	屏幕录制
`processes`	进程列表	无	无
`info`	系统信息	无	无
`clipboard get`	读取剪贴板	无	无
`clipboard set`	写入剪贴板	无	无
`app open`	打开应用	无	自动化
`app close`	关闭应用	无	自动化
`app front`	前端应用	无	自动化
`mouse position`	鼠标位置	pyautogui	辅助功能
`mouse click`	鼠标点击	pyautogui	辅助功能
`keyboard type`	键盘输入	pyautogui	辅助功能

🔐 权限配置

首次使用必须配置

运行权限检测脚本：

bash scripts/check_permissions.sh

或手动打开设置：

# 辅助功能（鼠标键盘控制）
open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"

# 自动化（应用控制）
open "x-apple.systempreferences:com.apple.preference.security?Privacy_Automation"

# 屏幕录制（截屏）
open "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture"

⚠️ 重要: 授权后需要重启终端应用！

📖 使用示例

示例 1: 截屏

用户：帮我截个屏
小龙虾：✅ 已截取屏幕，保存到 ~/Desktop/screenshot_20260331_213700.png

示例 2: 查看进程

用户：看看现在运行着哪些应用
小龙虾：
当前运行的主要进程：
- Safari (PID: 1234)
- VS Code (PID: 2345)
- Terminal (PID: 3456)
- QQ (PID: 4567)

示例 3: 关闭应用

用户：把 Safari 关了
小龙虾：✅ 已关闭 Safari 应用

示例 4: 系统信息

用户：看看我的电脑配置
小龙虾：
📊 系统信息
- 型号：MacBook Air (M2, 2023)
- 系统：macOS 15.3.1
- 内存：16 GB
- 存储：512 GB SSD

示例 5: 剪贴板操作

用户：复制这段文字到剪贴板
小龙虾：✅ 已将文字复制到剪贴板

🛠️ 安装

一键安装

cd skills/macos-desktop-control
bash scripts/install.sh

手动安装

# 1. 设置脚本权限
chmod +x scripts/*.sh

# 2. 检查权限
bash scripts/check_permissions.sh

# 3. 安装 Python 依赖（可选，用于鼠标键盘控制）
pip3 install --user --break-system-packages pyautogui pyscreeze pillow psutil

🔖 命令别名（快捷方式）

完整命令	快捷方式	说明
`bash scripts/screenshot.sh`	`mdc shot`	截屏
`bash scripts/processes.sh -g`	`mdc ps`	进程列表
`bash scripts/system_info.sh --short`	`mdc info`	系统信息
`bash scripts/app_control.sh front`	`mdc front`	前端应用
`python3 scripts/desktop_ctrl.py mouse position`	`mdc mouse`	鼠标位置

设置别名（添加到 ~/.zshrc）:

echo 'alias mdc="cd ~/.openclaw/workspace/skills/macos-desktop-control && bash"' >> ~/.zshrc
source ~/.zshrc

🐛 故障排除

问题 1: 权限未授予

bash scripts/check_permissions.sh

问题 2: 脚本无执行权限

chmod +x scripts/*.sh

问题 3: pyautogui 导入失败

pip3 install --user pyautogui pyscreeze pillow psutil

问题 4: 截屏为空白

检查屏幕录制权限：

open "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture"

📚 相关文档

references/permissions_guide.md - 权限配置指南
references/applescript_cheatsheet.md - AppleScript 速查表
references/troubleshooting.md - 故障排除
examples/basic_usage.md - 基础使用示例

⚠️ 安全说明

截屏隐私: 截屏默认保存到用户目录，请注意不要泄露敏感信息
键盘记录: 本技能不会记录键盘输入，仅模拟输入
权限最小化: 仅申请必要的权限
危险操作: 结束进程等危险操作需要确认

版本: 1.0.0
最后更新: 2026-03-31
平台: macOS only

安全使用建议

This package largely matches its macOS automation description, but review and proceed cautiously: - Do a quick code review of scripts/scripts/clawhub_sync.py and scripts/control_memory.py before running anything to confirm what data is uploaded and when. The ControlMemory entries include executed scripts/commands and may be sent to https://clawhub.com when configured. - The registry metadata did not declare CLAWHUB_API_KEY, but the code supports it — do NOT set or hardcode CLAWHUB_API_KEY unless you trust the remote service and have inspected the upload behavior. - Do not run setup_cron.sh or install.sh blindly. If you need scheduled automation, inspect the cron commands and consider running them manually in a controlled environment first. - Grant Accessibility/ScreenCapture/Automation permissions only if you trust the code; those permissions legitimately enable this functionality but also allow powerful control/observation of your desktop. - Avoid adding the suggested alias to your primary ~/.zshrc until you verify the workspace path and contents; prefer running scripts from a sandboxed directory first. - If you want to evaluate functionality safely: run the scripts in a disposable/test user account or VM, and run network calls through a proxy to observe outbound requests. If you do plan to use remote sync, audit the sync implementation and limit what is uploaded (or keep sync disabled). Confidence is medium because the repository contents align with the described functionality, but undocumented network/credential usage and automatic scheduling introduce nontrivial risk that requires user review.

功能分析

Type: OpenClaw Skill Name: macos-desktop-control-zhang Version: 1.5.3 This skill bundle provides extensive macOS automation capabilities but includes highly risky features and significant security vulnerabilities. The 'ControlMemory' system (implemented in control_memory.py and operation_search.py) records user commands and their corresponding execution scripts into a local file, which is then exfiltrated to an external endpoint (https://clawhub.com/api/v1) via clawhub_sync.py. Most critically, the system is designed to download and merge scripts from this remote repository and execute them using subprocess.run(shell=True), creating a significant risk of Remote Code Execution (RCE). The bundle also establishes persistence through crontab manipulation (scheduled_task.sh, setup_cron.sh) and requests broad system permissions (Accessibility, Screen Recording), which, combined with the telemetry and remote script execution features, poses a severe threat to user privacy and system integrity.

能力评估

ℹ Purpose & Capability

The codebase (many shell and Python scripts) matches the stated purpose: screenshots, process/system info, clipboard, AppleScript automation, pyautogui mouse/keyboard control, image recognition, Vosk offline speech, and a local 'ControlMemory' store. However SKILL.md lists native binaries (screencapture/ps/osascript) and required macOS permissions while the registry metadata showed none — a mismatch. The inclusion of ClawHub sync, voting, contributor ranking, and review systems is more than a minimal desktop-control tool but can be coherent if the author intends local+optional community sync.

⚠ Instruction Scope

Runtime instructions ask the agent/user to run scripts that: 1) request Accessibility/AppleEvents/ScreenCapture permissions (expected for UI automation), 2) create shell aliases by appending to ~/.zshrc, 3) run setup_cron.sh to schedule periodic tasks, and 4) perform ClawHub sync operations. The ControlMemory system automatically records successful operations (including the executed script text) and the code includes a sync/upload path to a remote ClawHub endpoint. Scripts also provide examples for hardcoding or storing CLAWHUB_API_KEY. These behaviors extend beyond purely local UI control (they persist data and can transmit it remotely) and are not fully surfaced in the registry metadata.

ℹ Install Mechanism

This skill is instruction-only (no platform install spec) which lowers installer risk. It does include scripts to download Vosk models and suggests pip installs (pyautogui, opencv, vosk). The model download script appears to point to the official Vosk model site in docs; no shortened or obviously malicious URLs were identified in provided files. Still, running the included install.sh and download scripts writes files and may download ~50MB models — review the scripts before executing.

⚠ Credentials

Registry metadata declared no required environment variables or credentials, but the code and docs reference CLAWHUB_API_KEY and CLAWHUB_API_BASE and show instructions for setting them or hardcoding keys into scripts. That means network credentials may be used though they aren't declared up-front. The requested macOS permissions (Accessibility, AppleEvents, ScreenCapture) are proportionate to UI control but grant broad ability to observe and control the desktop. Combined with optional network sync and cron scheduling, this could enable sensitive data (operation records, possibly textual commands, and metadata) to be uploaded if an API key/endpoint is configured.

⚠ Persistence & Privilege

The skill does not set always:true, but it provides scripts to install a cron job (setup_cron.sh) that can run periodic syncing and other tasks. Natural-language and automation components also auto-record successful operations to controlmemory.md. These mechanisms can create ongoing background activity (automatic uploads to ClawHub when configured). That persistence combined with network sync capability increases risk if you don't trust the remote endpoint or the sync logic.

版本历史

v1.5.3

- 文档内容丰富和结构优化，详细介绍所有功能和依赖，新增使用示例和故障排除指南。 - 命令速查表和命令别名表格更清晰，便于查找和使用。 - 安装和权限配置说明更详细，帮助用户快速排查常见问题。 - 安全说明部分明确常见风险和权限需求，提升安全意识。 - 明确区分基础功能和进阶功能，突出原生工具支持，无需额外依赖即可使用核心功能。

元数据

Slug macos-desktop-control-zhang

版本 1.5.3

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题