Rednote Mac

Control the RedNote (Xiaohongshu) Mac app via macOS Accessibility API. Fills the gap headless tools can't: read/reply to comments on video posts, send DMs, g...

This skill appears coherent: the files implement Accessibility-driven automation for the RedNote macOS app and the install steps match that goal. Before installing: (1) understand that granting Terminal Accessibility permission lets scripts control every app on your Mac — only enable it if you trust the code and ideally test in a separate/local user account or VM; (2) review install.sh and the Python files yourself (they use pbcopy, screencapture, osascript, cliclick and run local subprocesses — expected for GUI automation); (3) ensure you only enable the plugin when RedNote is a legitimate app you have installed; (4) if you plan to run the MCP server mode, be careful about how mcp is configured (it can expose different transports depending on runtime configuration). If you want more assurance, run the plugin in an isolated account/session and inspect/modify the code to remove any behaviors you don't want.

Type: OpenClaw Skill Name: rednote-mac Version: 1.3.7 The skill is classified as suspicious due to its reliance on broad macOS Accessibility API permissions, which grant extensive control over the user's system and all applications. While necessary for its stated purpose of controlling the RedNote app, this capability inherently carries significant risk if the skill is compromised or misused, as explicitly warned in `README.md`. Additionally, the `index.ts` file dynamically constructs Python code strings for execution via `execFileAsync`, which is a potential command injection vulnerability, even with `JSON.stringify` for some inputs. The `xhs_controller.py` also executes external binaries like `yt-dlp` with a URL parameter, introducing a risk if a malicious URL were to be processed. There is no clear evidence of intentional malicious behavior such as data exfiltration to external endpoints or persistence mechanisms.