Security audit
Security checks for vulnerabilities and agentic risk
This SwitchBot skill appears purpose-built for smart-home control, but it exposes broad physical-device commands including locks and raw commands without clear confirmation or scoping safeguards.
Install only if you are comfortable giving the agent durable SwitchBot API access capable of controlling real devices. Review requests carefully, especially for locks, plugs, and batch operations, and prefer adding your own confirmation rule before any unlock or power action.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
#!/usr/bin/env python3
"""
SwitchBot Cloud API Controller
Requires: ~/.config/switchbot/credentials.json with token and secret
"""
import json
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
#!/usr/bin/env python3
"""
SwitchBot Cloud API Controller
Requires: ~/.config/switchbot/credentials.json with token and secret
"""
import json
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
#!/usr/bin/env python3
"""
SwitchBot Cloud API Controller
Requires: ~/.config/switchbot/credentials.json with token and secret
"""
import json
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
#!/usr/bin/env python3
"""
SwitchBot Cloud API Controller
Requires: ~/.config/switchbot/credentials.json with token and secret
"""
import json
The skill documents shell and network-capable operations but does not declare any explicit tool scope or permissions boundaries. In an agent environment, that increases the chance the skill can invoke broader-than-necessary capabilities, including outbound API access and local shell actions, without clear restriction or review.
This skill can unlock locks, power plugs, move curtains, and control lights, but the documentation does not require an explicit confirmation or warn about the physical-world consequences before performing such actions. That can lead to unsafe or unintended actuation, especially for locks and powered devices, if a user request is ambiguous or spoofed.
The skill instructs the user to persist long-lived API credentials in a local file under ~/.config, creating durable access to smart-home devices. If the host or account is later compromised, those stored secrets could be reused to control physical devices such as locks, plugs, and curtains.
mkdir -p ~/.config/switchbot
chmod 700 ~/.config/switchbot
cat > ~/.config/switchbot/credentials.json << 'EOF'
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
mkdir -p ~/.config/switchbot
chmod 700 ~/.config/switchbot
cat > ~/.config/switchbot/credentials.json << 'EOF'
{
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
"secret": "YOUR_SECRET_HERE" } EOF chmod 600 ~/.config/switchbot/credentials.json
### 3. Discover Devices
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
from pathlib import Path
CREDENTIALS_PATH = Path.home() / ".config" / "switchbot" / "credentials.json"
API_BASE = "https://api.switch-bot.com/v1.1"
def load_credentials():
"""Load API credentials from config file."""
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
print("2. Copy Token and Secret Key")
print("\nThen create the credentials file:")
print(f" mkdir -p {CREDENTIALS_PATH.parent}")
print(f" chmod 700 {CREDENTIALS_PATH.parent}")
print(f' echo \'{{"token": "YOUR_TOKEN", "secret": "YOUR_SECRET"}}\' > {CREDENTIALS_PATH}')
print(f" chmod 600 {CREDENTIALS_PATH}")
sys.exit(1)
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
print(f" mkdir -p {CREDENTIALS_PATH.parent}")
print(f" chmod 700 {CREDENTIALS_PATH.parent}")
print(f' echo \'{{"token": "YOUR_TOKEN", "secret": "YOUR_SECRET"}}\' > {CREDENTIALS_PATH}')
print(f" chmod 600 {CREDENTIALS_PATH}")
sys.exit(1)
with open(CREDENTIALS_PATH) as f:
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
print(f" mkdir -p {CREDENTIALS_PATH.parent}")
print(f" chmod 700 {CREDENTIALS_PATH.parent}")
print(f' echo \'{{"token": "YOUR_TOKEN", "secret": "YOUR_SECRET"}}\' > {CREDENTIALS_PATH}')
print(f" chmod 600 {CREDENTIALS_PATH}")
sys.exit(1)
with open(CREDENTIALS_PATH) as f:
The command CLI path accepts arbitrary device IDs, command names, and parameters, allowing actions beyond the narrowly described curtain/plug operations in the skill metadata. In an agent setting, this broadens the capability surface and can enable unexpected control of locks, IR remotes, or other SwitchBot devices if higher-level policy assumes only limited device-specific actions are available.
No suspicious patterns detected.