@lanchuske/messages-team-chat-on-mac-local-mcp
BUse when the user wants to read or search iMessage, Microsoft Teams, Slack, WhatsApp or Signal on their Mac — things cloud connectors can't reach. Powered by Local MCP, local-only.
Install
agr install @lanchuske/messages-team-chat-on-mac-local-mcp --target claudeWrites 1 file into .claude/skills/, pinned to git-0cda8d14.
- .claude/skills/messages-team-chat-on-mac-local-mcp/SKILL.md
Document
name: Messages & team chat on Mac (Local MCP) description: Use when the user wants to read or search iMessage, Microsoft Teams, Slack, WhatsApp or Signal on their Mac — things cloud connectors can't reach. Powered by Local MCP, local-only.
Messages & team chat via Local MCP
Local MCP reads the user's local message stores on their Mac — iMessage (Messages.app), Microsoft Teams, Slack, WhatsApp, Signal — which cloud connectors physically cannot access.
Core tools
- iMessage:
list_message_chats,read_messages,search_messages. - Teams:
teams_list_chats/teams_list_channels/teams_read_chat_messages/teams_read_channel_messages. - Slack:
slack_list_channels/slack_read_channel_messages/slack_search_messages. - WhatsApp / Signal:
whatsapp_*/signal_*readers. - Sending:
send_message(iMessage) andteams_send_messagepreview before sending — never send silently.
Good practice
- Reading is local and fast; summarize conversations rather than dumping every line.
- For "did X text me about Y", use
search_messages. - Teams/Slack/WhatsApp/Signal require the respective app to be set up on the Mac; if a tool says it's not connected/synced, relay that setup step to the user.
- Any send is preview-first — show the recipient + text, confirm, then send.
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- passType matchnot applicable to this artifact type
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-0cda8d1429f72026-07-31