Closeli Open Device Live Query
v1.0.0调用 ai-open-gateway 的设备直播接口 POST /api/device/live,获取指定设备的 H5 播放器直播链接。Use when: 需要远程查看设备实时画面、获取直播链接分享给他人。⚠️ 需设置 AI_GATEWAY_API_KEY。
⭐ 0· 20·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description request AI_GATEWAY_API_KEY and python3; the included script uses that API key to call /api/device/list and /api/device/live on the declared host. Required binaries, env vars, and primary credential are proportional and expected for this functionality.
Instruction Scope
SKILL.md places formatting obligations on the agent (parse the script JSON output and render a Markdown link, use _device_name or a MAC-derived fallback). The script itself prints structured JSON (good), but the agent must implement the presentation rules (e.g., MAC-prefix trimming fallback is not implemented in the script). Ensure the agent will follow those MUST rules rather than echo raw JSON.
Install Mechanism
No install spec or external downloads; single Python script requiring httpx (standard third-party package). Low installation risk.
Credentials
Only AI_GATEWAY_API_KEY is required (plus optional AI_GATEWAY_HOST/AI_GATEWAY_VERIFY_SSL/AI_GATEWAY_NO_ENV_FILE). The script will read ~/.openclaw/.env as a fallback (this path is declared in metadata). Reading a shared credentials file is convenient but increases exposure; SKILL.md explicitly warns to disable this in production.
Persistence & Privilege
always is false and the skill does not modify other skills or system-wide configs. Autonomous invocation is allowed (default) but not combined with broad privileges here.
Assessment
This skill appears to do what it says: call your ai-open-gateway to fetch an H5 live-player URL using AI_GATEWAY_API_KEY. Before installing: (1) prefer passing AI_GATEWAY_API_KEY via environment variable (not the shared ~/.openclaw/.env); set AI_GATEWAY_NO_ENV_FILE=true in production to avoid reading the shared file; (2) verify AI_GATEWAY_HOST is the correct/trusted gateway domain; (3) install the httpx Python package if needed; (4) confirm your API key uses least privilege (only device-live permission) so that exposure is limited. Note: the SKILL.md mandates the agent format the script's JSON output as a Markdown link (and do a MAC fallback if _device_name is empty) — ensure your agent will implement those presentation rules rather than simply printing raw JSON.Like a lobster shell, security has layers — review code before you run it.
latestvk977tvbz3rdt28emxh0wn5r09s84f4t1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
EnvAI_GATEWAY_API_KEY
Primary envAI_GATEWAY_API_KEY
