Keychain Access

macOS Keychain helpers (list/get/set/delete) via the security CLI. Trigger this skill when the user needs to inspect, store, update, or remove generic passwo...

This skill appears to do what it says: safely wrap the macOS `security` CLI with confirmations, masking, and dry-run support. Before installing or running it: 1) Inspect the included keychain-access.sh yourself (you already have the source) and consider running it in --dry-run mode first. 2) Ensure the target environment has `security` and `python3` on PATH (the metadata only lists `security`, but the script calls python3). 3) Be cautious with flags that reveal or transport secrets: avoid --password (insecure) and only use --raw when a user explicitly requests the plaintext secret. 4) Prefer targeted keychain paths (--keychain) and service/account filters to avoid touching system or unrelated keychains. 5) Note minor inconsistencies (path examples and a small truncated/typo near the script's final error message) — you may want to fix/update the script or SKILL.md before automated use. If you want higher confidence, request a full audit of the final lines of the script (the provided file was truncated in the bundle) and confirmation that no other hidden files or network behavior exist.

Type: OpenClaw Skill Name: openclaw-skill-keychain-access Version: 1.0.0 The keychain-access skill is a legitimate utility for managing macOS Keychain entries via the 'security' CLI. The implementation in 'keychain-access.sh' demonstrates strong security practices, including default redaction of secrets, mandatory user confirmation for destructive operations, and support for secure password handling via stdin or environment variables to avoid leaking secrets in shell history. No evidence of data exfiltration, unauthorized access, or malicious intent was found in the code or the 'SKILL.md' instructions.