Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Multi-user push, action logging, actor display
What This Skill Does
LuLu Monitor sits between LuLu Firewall and your phone, intercepting connection alerts, running a quick AI risk analysis, and pushing a Telegram message with one-tap Allow/Block buttons. It supports an auto-execute mode that silently approves high-confidence safe connections. Actions taken in Telegram are reflected back on the LuLu popup via AppleScript automation.
Combining AI triage with Telegram callbacks means you can make informed firewall decisions remotely instead of sitting at the machine waiting for popups.
When to use it
- Reviewing outbound connection attempts while away from your Mac
- Blocking unknown processes reaching out to suspicious IPs
- Approving developer tools like curl or brew without manual popup interaction
- Auditing what apps phone home during software installs
- Managing firewall rules from a phone without unlocking the Mac
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: a new process is trying to connect to an external IP
- 1LuLu Monitor detects the alert popup via macOS Accessibility APIs
- 2Extracts process name, destination IP, port, and DNS info from the popup
- 3Spawns a fast AI model to assess connection risk
- 4Sends a Telegram message with risk summary and four action buttons
- 5Receives callback when user taps a button and clicks the corresponding LuLu action via AppleScript
LuLu popup is dismissed with the chosen rule applied and the Telegram message updated to show the result
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.