Tuya Smart Control

• Analyzed: May 11, 2026, 7:39 AM
• Findings: 1
• Version: 1.0.5
• Hash: d9f256486137486312de104e6686bd57c2047fa1ef268eadc957f22f1f35878f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The tuya-smart-control skill is a well-documented and legitimate integration for managing Tuya smart home devices via the Tuya Open Platform. The Python SDK (tuya_api.py) and WebSocket client (tuya_device_mq_client.py) implement standard authentication and communication with official Tuya endpoints (e.g., openapi.tuyaus.com, wsmsgs.iot-wus.com). The SKILL.md instructions provide clear workflows for device control, notifications, and camera captures while explicitly prohibiting high-risk operations like smart lock control or firmware updates. No evidence of malicious intent, data exfiltration to third parties, or prompt-injection attacks was found.