Roborock Vacuum Control

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 227d89a6a4c73526051993f26f59fabeed23be4117aac831045f129c37f22bf4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides instructions for installing and using the `roborock` CLI to control Roborock robot vacuums. All commands and instructions in `SKILL.md` are directly related to the stated purpose, including `pipx install python-roborock` for installation and `roborock login` for authentication. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The requirement for Roborock account credentials is inherent to controlling the device via its API and is handled by the legitimate `roborock` CLI tool.