ClawHub

Smart Lights

v2.0.2

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Smart Lights concepts, best practices, and implementation patterns.

⭐ 0· 126·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe a local reference for Smart Lights and the included script implements exactly that: command-driven, heredoc-based plaintext output. No unrelated credentials, binaries, or network access are requested.
✓
Instruction Scope
SKILL.md explicitly states all commands output plaintext via heredoc and require no network access. The provided script only prints internal documentation, does not read arbitrary files, does not access environment variables, and makes no network calls or external subprocess downloads.
✓
Install Mechanism
There is no install spec (instruction-only skill with a small helper script). No external downloads, package installs, or archive extraction are present.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The runtime script does not reference any external secrets or environment variables, so requested access is proportional to the purpose.
✓
Persistence & Privilege
The skill is not forced always-on (always: false) and does not attempt to modify other skills or global agent settings. It does not request persistent system privileges.
Assessment
This skill appears low-risk: it ships a small local shell script that prints documentation and does not access the network or secrets. Two minor implementation inconsistencies exist (the SKILL.md/registry version is 2.0.2 while the script's internal VERSION is 2.0.1, and the help heredoc is quoted so it will display the literal string "$VERSION" rather than the numeric version). None of these affect security, but if you depend on exact version reporting or want absolute assurance, review or run the script in a sandbox before granting it broader execution rights. Otherwise, installing/using this skill is reasonable given its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97eqdjvk71tg0jz2n94c5gjq183gqh2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments