Lametric Cli

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherently focused on controlling LaMetric smart displays, with expected notices around installing an external CLI, using a device API key, and changing display/audio behavior.

Before installing, make sure you trust the external lametric CLI source, configure the LaMetric API key only for devices you want controlled, and be aware that the agent may send notifications or adjust display/audio/app settings when asked.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may send alerts, play sounds, or change device behavior when using this skill.

Why it was flagged

The skill can trigger visible and audible behavior on a physical smart display. This is disclosed and fits the device-control purpose, but users should be aware it can disturb the environment.

Skill content
Critical alert (wakes device, plays alarm):
lametric notify "ALERT: Server down" --priority=critical --sound=alarm1
Recommendation

Use it only with LaMetric devices you intend the agent to control, and review requests that involve alarms, volume, brightness, Bluetooth, radio, or streaming.

What this means

Anyone with access to the configured API key could potentially control the associated LaMetric device.

Why it was flagged

The skill requires a LaMetric device API key, which is expected for controlling the device but grants authority to send commands to it.

Skill content
Get API key from LaMetric mobile app: Device Settings > API Key ... export LAMETRIC_API_KEY=your-api-key
Recommendation

Keep the API key private, configure it only for devices you want controlled, and rotate or remove it if you stop using the skill.

What this means

Installing the skill requires trusting the external lametric CLI distributed through Homebrew or Go.

Why it was flagged

The skill depends on installing an external CLI package rather than bundled reviewed code. This is normal for a CLI wrapper skill, but users should trust the upstream source.

Skill content
brew install dedene/tap/lametric

go install github.com/dedene/lametric-cli/cmd/lametric@latest
Recommendation

Install from the documented upstream project only, and consider pinning or reviewing the version if your environment requires stricter supply-chain controls.