← 返回 Skills 市场
jfarcand

Mirroir

作者 Jeanfrancois Arcand · GitHub ↗ · v0.13.0
darwin ⚠ suspicious
743
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install mirroir
功能描述
Control a real iPhone through macOS iPhone Mirroring — screenshot, tap, swipe, type, launch apps, record video, OCR, and run multi-step scenarios. Works with...
安全使用建议
Before installing: 1) Inspect the installer: do NOT run curl | bash without reviewing https://mirroir.dev/get-mirroir.sh — prefer Homebrew (brew tap jfarcand/tap && brew install iphone-mirroir-mcp) or npx if you trust the npm package. 2) Verify sources: check the jfarcand/tap Homebrew formula and the iphone-mirroir-mcp npm package or upstream repo to confirm maintainers and code. 3) Understand permissions: Karabiner/DriverKit, Screen Recording, and Accessibility give the tool the ability to capture screen and synthesize input (keystroke capture / injection risk); only grant them on a trusted machine and revoke if you stop using the tool. 4) Limit exposure: run on a dedicated/test mac if possible, review MCP/server command config, and consider whether you want the agent to call this skill autonomously. 5) If unsure, request the upstream source code or run installation in an isolated environment (VM) and audit installed components before use.
功能分析
Type: OpenClaw Skill Name: mirroir Version: 0.13.0 The skill is classified as suspicious primarily due to its installation method, which involves a `curl | bash` command (`/bin/bash -c "$(curl -fsSL https://mirroir.dev/get-mirroir.sh)"` in SKILL.md). This command executes arbitrary code downloaded from an external domain (`mirroir.dev`), posing a significant supply chain risk and allowing for potential arbitrary code execution. Furthermore, the skill automatically installs and configures Karabiner-Elements, a powerful system utility requiring deep system access (DriverKit extension, Accessibility permissions), and explicitly requires Screen Recording and Accessibility permissions, granting it extensive control and visibility over the user's macOS system and iPhone interactions. While the stated purpose is legitimate iPhone control, the installation method and required permissions introduce severe security vulnerabilities.
能力评估
Purpose & Capability
The skill claims to control an iPhone via macOS iPhone Mirroring and requires the iphone-mirroir-mcp binary and macOS — this is coherent. Karabiner-Elements and a helper daemon are reasonable for virtual keyboard/control functionality. OS restriction to darwin and listed tools match the purpose.
Instruction Scope
Runtime instructions do not request unrelated files or credentials, but they include a one-line install that executes a remote script: /bin/bash -c "$(curl -fsSL https://mirroir.dev/get-mirroir.sh)". The SKILL.md also instructs enabling DriverKit/Karabiner and granting Screen Recording and Accessibility — expected for this capability but high-privilege and worth explicit review.
Install Mechanism
Install options include Homebrew (jfarcand/tap) and an npm package (iphone-mirroir-mcp), which are reasonable. However the SKILL.md recommends a direct curl | bash installer from mirroir.dev (arbitrary remote script execution). Prefer vetted package installs or inspect the installer before running.
Credentials
No environment variables or external credentials are requested. Requests for system permissions (Accessibility, Screen Recording, DriverKit extension) are proportional to a tool that simulates input and captures the screen, but they carry privacy/security implications (e.g., potential to capture keystrokes and screen contents).
Persistence & Privilege
The skill installs a helper daemon / MCP server and Karabiner components which run with system-level capabilities. It does not set always: true and does not request other skills' configs, but installing driver-level components and a persistent MCP helper increases blast radius and should be consented to consciously.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mirroir
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mirroir 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.13.0
Align version with iphone-mirroir-mcp v0.13.0
v1.0.0
Initial release — control a real iPhone through macOS iPhone Mirroring via MCP
元数据
Slug mirroir
版本 0.13.0
许可证
累计安装 1
当前安装数 1
历史版本数 2
常见问题

Mirroir 是什么?

Control a real iPhone through macOS iPhone Mirroring — screenshot, tap, swipe, type, launch apps, record video, OCR, and run multi-step scenarios. Works with... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 743 次。

如何安装 Mirroir?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mirroir」即可一键安装,无需额外配置。

Mirroir 是免费的吗?

是的,Mirroir 完全免费(开源免费),可自由下载、安装和使用。

Mirroir 支持哪些平台?

Mirroir 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin)。

谁开发了 Mirroir?

由 Jeanfrancois Arcand(@jfarcand)开发并维护,当前版本 v0.13.0。

💬 留言讨论