xiaodu-senior-night-assist-official

• Risk level: Low
• Analyzed: Apr 3, 2026, 8:42 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's declared purpose (orchestrating low‑impact night lighting using an existing xiaodu-control-official skill) matches its instructions and minimal local script; nothing requests unrelated credentials or installs arbitrary code.

This skill appears coherent and limited in scope, but review a few practical points before installing: 1) Ensure you already have a trusted xiaodu-control-official skill and that its helper scripts (control_iot.sh, list_* etc.) are present and trustworthy — this skill relies on them. 2) Be aware it may write preference files (XIAODU_CONTEXT.md, MEMORY.md) in the skill workspace to persist user choices; confirm you’re comfortable with local persistence. 3) The included night_light_tail.sh is small and readable (it sleeps then calls control_iot.sh to turn lights off), but verify control_iot.sh’s behavior if you need stronger guarantees. 4) Autonomous invocation is allowed by default (not flagged here) — if you want to limit when the skill runs, restrict invocation policies on your agent. If you want extra assurance, inspect the xiaodu-control-official scripts the skill calls before enabling.