Src

Bridge macOS-only tools into a Linux OpenClaw gateway via SSH wrappers and connected Mac nodes. Use when a Linux gateway needs to run imsg, remindctl, memo,...

This skill appears to do exactly what it says: create small SSH wrappers so a Linux gateway can call macOS binaries on trusted Mac nodes. Before installing, ensure you have passwordless SSH set up with a scoped key (prefer one key per gateway or per-node), pin known_hosts if possible, and install wrappers as a non-root user into an expected directory. Review the generated wrapper scripts (they exec ssh and pass args through to the remote binary) so you understand exactly what remote commands will run and to confirm no broad shell bridging is being created. Do not store private keys or OAuth tokens in the skill folder; revoke or rotate the dedicated SSH key if you remove the wrapper. If you need stricter isolation, test in a sandboxed account/machine first. Overall the design is coherent, but pay attention to SSH key management and quoting/argument handling in your environment.

Type: OpenClaw Skill Name: src Version: 0.6.1 The mac-node-bridge skill provides a framework for a Linux gateway to execute commands on remote macOS nodes via SSH. It includes scripts for discovering remote binaries (verify-node-tool.sh), installing common tool presets (install-preset.sh), and generating local shell wrappers (install-wrapper.sh). While the implementation demonstrates security awareness by using argument escaping (printf %q) and providing detailed guidance on least privilege and auditing (security-model.md), the core functionality involves high-risk operations such as automated SSH execution and the creation of executable scripts on the local filesystem, which meets the threshold for a suspicious classification despite the lack of clear malicious intent.