Alexa CLI
v1.3.0Control Amazon Alexa devices and smart home via the `alexacli` CLI. Use when a user asks to speak/announce on Echo devices, control lights/thermostats/locks, send voice commands, or query Alexa.
⭐ 14· 3.7k·19 current·22 all-time
byBuddy Hadry@buddyh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description align with requirements and instructions. The only required binary is alexacli and the SKILL.md shows exactly the CLI commands the skill will run; no unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions stay within the Alexa-control scope (auth, list devices, speak, command, play URL, ask/askplus). They reference a local config file (~/.alexa-cli/config.json) and an interactive browser-based auth flow; these are expected but allow high-impact operations (announcements, locks, unlocks, playing external audio). Verify you are comfortable with an agent having the ability to perform those actions.
Install Mechanism
Install options are a third-party Homebrew tap (buddyh/tap/alexacli) or a Go module from github.com/buddyh/alexa-cli. Both are typical but are third-party sources; they will install/compile code on the host. No obscure shorteners or direct arbitrary downloads are used.
Credentials
No required environment variables or unrelated credentials are requested. An optional ALEXA_REFRESH_TOKEN is declared, which is reasonable for non-interactive use. The metadata and instructions do not request other secrets.
Persistence & Privilege
Skill is not force-included (always:false) and does not request system-wide changes. However, allowing autonomous invocation (the platform default) means an agent using this skill could perform impactful actions on your smart home; consider whether you want the agent to act without manual confirmation.
Assessment
This skill appears to do what it says: it runs the alexacli CLI to control your Echo devices. Before installing, consider: 1) Review the Homebrew tap and GitHub repo (buddyh/alexa-cli) yourself to ensure you trust the source. 2) Installing via brew or go will place/compile a binary on disk — prefer manual install if you want to inspect code first. 3) The skill enables high-impact actions (announcements, playing remote audio, locking/unlocking); if you allow autonomous agent invocation, the agent could run those commands without further confirmation. 4) Auth tokens are stored at ~/.alexa-cli/config.json and are valid ~14 days; treat them as sensitive and prefer secure storage. If you want a lower-risk setup: install and authenticate alexacli yourself, then only enable the skill when you need it (or avoid granting the agent autonomous invocation).Like a lobster shell, security has layers — review code before you run it.
alexavk972xx8fm5p51dcqstbaza30z97yj47yechovk972xx8fm5p51dcqstbaza30z97yj47yhome automationvk972xx8fm5p51dcqstbaza30z97yj47ylatestvk9746wrafn01qy4jx8xm9q0ve5810erfsmart homevk972xx8fm5p51dcqstbaza30z97yj47ytext to speechvk972xx8fm5p51dcqstbaza30z97yj47yttsvk972xx8fm5p51dcqstbaza30z97yj47y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔊 Clawdis
Binsalexacli
Install
Install alexacli (brew)
Bins: alexacli
brew install buddyh/tap/alexacliInstall alexa-cli (go)
Bins: alexacli
go install github.com/buddyh/alexa-cli/cmd/alexa@latest