Homebridge
v0.1.0Control smart home devices via Homebridge Config UI X REST API. Use to list, turn on/off, adjust brightness, color, or temperature of HomeKit-compatible accessories. Supports lights, switches, thermostats, fans, and other Homebridge-managed devices.
⭐ 1· 1.9k·2 current·2 all-time
by@jiasenl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and SKILL.md: the script and examples talk to Homebridge Config UI X REST API and require Homebridge admin credentials. There are no unrelated credentials, binaries, or install steps requested.
Instruction Scope
Instructions stay within the Homebridge API domain (authenticate, list, get, set). Minor documentation inconsistencies: the Python module docstring mentions reading ~/.clawdbot/clawdbot.json under skills.entries.homebridge, but both SKILL.md and the implemented load_config() function actually use ~/.clawdbot/credentials/homebridge.json. SKILL.md also shows curl examples that use environment variables (HOMEBRIDGE_URL/HOMEBRIDGE_USERNAME/HOMEBRIDGE_PASSWORD) while the provided script expects the credentials file; this is a usability/documentation mismatch but not a security mismatch.
Install Mechanism
No install spec (instruction-only with an included script). No downloads or external installers; the included Python script uses only standard library modules. This has low install risk.
Credentials
The only secret required is the Homebridge admin username/password stored in a local credentials file; this is proportional to managing Homebridge devices. The skill does not request unrelated service keys or system credentials.
Persistence & Privilege
always:false (no forced persistence). The skill reads a local credentials file but does not modify other skills, system settings, or persist extra state. It does not request elevated system privileges.
Assessment
This skill appears coherent for controlling a Homebridge instance, but check a few things before installing: 1) Verify the credential file path (~/.clawdbot/credentials/homebridge.json) exists and contains correct values; the code and docs are slightly inconsistent about paths—use the credentials file path shown in SKILL.md or the script. 2) Keep the Homebridge instance on a trusted/local network (avoid exposing the admin API to the public Internet). 3) Restrict filesystem permissions on the credentials file (readable only by your user). 4) Inspect the provided script (you already have it) to confirm it meets your expectations—it's pure Python using standard libs. 5) Prefer creating a least-privilege Homebridge account if possible rather than using a full admin account. 6) Confirm you trust the skill publisher/source (homepage is upstream project, but the registry source is unknown). If any of these sound risky for you, do not install or run the script until addressed.Like a lobster shell, security has layers — review code before you run it.
latestvk974x5bj48tfypjxzy4cksfwed7zyew6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏠 Clawdis