screen reviewer

Monitor computer activities via periodic screenshots, extract text with OCR, and generate daily review reports with ROI analysis. Use when the user asks abou...

This package does what it claims (periodically screenshots your screen, OCRs content, and generates AI reports), but it installs a persistent background service, writes screenshots and logs to ~/.screen-reviewer, and expects you to grant macOS Screen Recording and Accessibility permissions. Before installing: - Accept that it will capture everything visible on your screen (including passwords, banking, messenger content) unless you carefully configure and test the blacklist and pause features. - Note the project will create launchd services (auto-start and KeepAlive) and symlinks under ~/.cursor and ~/.codex; uninstall.sh attempts cleanup but logs/reports are preserved by default. - The registry metadata omitted runtime requirements: an API key (OPENAI_API_KEY or configured env) is needed for full AI reports, and Swift/pytesseract may be required for OCR. The package’s requirements.txt does not include pytesseract, and macOS tools (screencapture, osascript, swiftc) are assumed present. Ask the author or inspect the install.sh and service_manager.py before running. If you want to proceed safely: - Run install in a disposable/test account or VM first. - Inspect ~/.screen-reviewer contents and the created launchd plists before granting permissions and enabling install. - Consider disabling automatic install of launchd services and running the daemon manually while you evaluate. - If you need strict privacy, do not install: the feature set inherently collects highly sensitive data and retains logs/reports by default. What would change this assessment: explicit registry metadata listing required env vars and binaries (OPENAI_API_KEY, ANTHROPIC_API_KEY, swiftc, tesseract), removal or clearer user confirmation for auto-start persistence, and an opt-in flow that warns about retention and sensitive data collection.

Type: OpenClaw Skill Name: screen-reviewer Version: 1.0.0 The bundle implements a screen-monitoring and productivity analysis tool that captures screenshots every 5 seconds, performs OCR on all on-screen text, and sends aggregated data to external AI providers (OpenAI/Claude) to generate reports. While these behaviors align with the stated purpose, the tool possesses high-risk capabilities including continuous screen surveillance, extraction of potentially sensitive information via OCR (e.g., in 'capture_daemon.py' and 'ocr_processor.py'), and the establishment of persistence via macOS launchd agents ('service_manager.py'). The inherent risk of accidental exfiltration of credentials or private data to third-party LLMs, combined with background persistence, warrants a suspicious classification despite the lack of clear malicious intent.