Community code plugin. Review compatibility and verification before install.
Latest release: v3.8.0Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The declared purpose is coherent: it exposes macOS PIM tools for calendars, reminders, contacts, and Mail.app, including expected read/write actions such as create, update, delete, send, reply, and move.
Instruction Scope
Most sensitive capabilities are disclosed, but the mail save_attachment schema says destDir must stay within home or system temp while the JavaScript handler passes caller-supplied destDir directly to mail-cli without visible enforcement in the package.
Install Mechanism
The package has no install or postinstall script that downloads binaries; metadata and docs say users build the required Swift CLIs locally, and static scan plus VirusTotal telemetry are clean.
Credentials
macOS Calendar, Reminders, Contacts, and Mail.app permissions are proportionate to the plugin purpose, but they expose highly sensitive local personal data and externally impactful mail actions.
Persistence & Privilege
Once macOS TCC and Automation permissions are granted, the agent can continue using broad read/write PIM access, including Mail.app send/delete and batch delete, until the user revokes those permissions.
Scan Findings in Context
[SQP-2] expected: Saving mail attachments is an expected mail-management feature, but the package-level handler does not enforce the path restriction promised by the tool schema before invoking the underlying CLI.
[RA2] expected: Broad read/write access to Apple PIM stores is disclosed and purpose-aligned, so this is not evidence of malicious behavior by itself; it remains a user-review issue because the permission is durable and high impact.
What to consider before installing
Install only if you are comfortable giving an agent ongoing access to read and change your Apple Calendar, Reminders, Contacts, and Mail, including sending and deleting email. Use dedicated macOS profiles or plugin config scopes where possible, review mail actions before execution, avoid saving attachments to sensitive directories, and know how to revoke the macOS Privacy & Security permissions if you no longer need the plugin.