ClawHub

Bardi Smart Home - Tuya Devices Compatible

v1.1.0

Mengontrol perangkat smart home Tuya melalui Cloud API, termasuk lampu, colokan, sensor, meteran, dan lainnya. Mendukung lampu pintar Bardi dengan fitur peng...

⭐ 0· 98·0 current·0 all-time
by@elony-7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actual behavior: cloud control of Tuya devices and local UDP discovery. Required env vars (TUYA_ACCESS_ID and TUYA_ACCESS_SECRET) are exactly what a Tuya cloud integration needs. The declared dependency (tinytuya) is appropriate.
✓
Instruction Scope
SKILL.md and SETUP.md instruct only to use the Tuya cloud API and run the included scripts. The runtime instructions reference the same environment variables declared in metadata. Scripts perform device discovery (UDP broadcasts) and cloud API calls; they do not read unrelated files, other env vars, or exfiltrate data to third‑party endpoints.
ℹ
Install Mechanism
This is instruction-only with no automated install spec. The package requires the public Python package tinytuya (pip). That is a reasonable dependency, but the skill will only work if tinytuya is installed manually or in the agent environment; installing Python packages from PyPI carries the usual trust considerations.
✓
Credentials
Only Tuya credentials (TUYA_ACCESS_ID, TUYA_ACCESS_SECRET) and optional TUYA_API_REGION are required. The number and naming of requested env vars are proportional to the functionality. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
The skill is not force-enabled (always:false) and does not request persistent system-level privileges. It does not modify other skills or agent-wide config. Autonomous invocation is allowed by default but is not combined with other privilege abuses.
Assessment
This package appears to do what it says: control Tuya/Bardi devices via the Tuya Cloud API and discover local devices via UDP broadcasts. Before installing: 1) Keep credentials scoped to a dedicated Tuya cloud project with least privilege; avoid using highly privileged account keys. 2) Be aware the local scanner sends UDP broadcasts (255.255.255.255) — run on a trusted network. 3) The skill depends on the public tinytuya Python package; install in a virtual environment and review that dependency if you have supply‑chain concerns. 4) If you plan to let an agent call this skill autonomously, ensure you’re comfortable with it having access to the Tuya credentials because it can control devices tied to that account.

Like a lobster shell, security has layers — review code before you run it.

latestvk977mre2pwzw7036h10ygw3gms83vt2s

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🏠 Clawdis
EnvTUYA_ACCESS_ID, TUYA_ACCESS_SECRET
Primary envTUYA_ACCESS_ID

Comments