add-imessage
Warn
Audited by Socket on Apr 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is mostly coherent with its stated purpose, and the install path aligns in part with official NanoClaw/Chat SDK documentation. However, it relies on trusted branch-copying from `origin`, requests broad Full Disk Access in local mode, and in remote mode forwards credentials and message data to a third-party Photon service with a minor domain inconsistency (`photon.im` vs `photon.codes`). This looks like a real integration with meaningful privacy and trust risk rather than overt malware.
Confidence: 84%Severity: 56%
Audit Metadata