Manifest
    by Manifold
    Back to Results
    2026.10.2

    @openclaw/imessage

    OpenClaw iMessage channel plugin using imsg on a signed-in Mac

    code-plugin
    Rank#1896
    openclawclawhub42Last scanned Oct 12, 2026, 08:05 PMhttps://github.com/openclaw/openclaw
    Created
    11 months ago
    Last commit
    yesterday
    Latest release
    v2026.10.22 days ago

    Ecosystem

    4 related extensions

    Security Findings

    4

    Name shared with another plugin

    SuspiciousEcosystem

    Shares the normalized name 'imessage' with claudeplugins/adelaidasofia/imessage-mcp (lineage trust 88), the cluster's top-ranked entry; 5 plugins share it. Informational — does not affect the trust score.

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

    Contents

    1 skill bundled by this extension

    1 lower risk

    imsg

    skill

    Low
    skills/imsg5631db48d922…

    Editions

    7
    • 2026.10.2
      Scanned Oct 12, 2026, 08:05 PMMedium
    • 2026.10.1
      Scanned Oct 11, 2026, 08:04 PMMedium
    • 2026.9.9
      Scanned Oct 8, 2026, 08:04 PMMedium
    • 2026.9.7
      Scanned Sep 30, 2026, 08:03 PMMedium
    • 2026.9.6
      Scanned Sep 28, 2026, 08:03 PMMedium
    • 2026.9.5
      Scanned Sep 19, 2026, 08:03 PMMedium
    • 2026.9.3
      Scanned Sep 8, 2026, 08:04 PMMedium