Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Midea Air Conditioners

Control Midea ACs. Use this skill when the user wants to control ACs. Supports turning ACs on/off, setting temperature, setting fan speed, switching modes, and more.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
2 · 2.1k · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included Python script: it controls Midea ACs on the local network using the msmart library and hard-coded device IPs. No unrelated credentials, binaries, or services are requested.
Instruction Scope
SKILL.md maps natural-language intents to specific script commands and instructs running the included script from the skill directory. One minor concern: some NL mappings (e.g., "Warmer / more warm") leave a wide discretionary range ("increase by 2 - 10 degrees") that an agent must concretely choose; the script itself enforces temperature bounds (16–30°C). Otherwise the instructions remain within the stated purpose and do not ask the agent to read unrelated files or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only with an included script). The script depends on the public msmart-ng library (not bundled). No downloads or non-standard installers are referenced.
Credentials
The skill requires no environment variables, no credentials, and no config paths. It controls devices only via local IPs listed in the AC_IPS dict. Asking for local device IPs (hard-coded) is expected for this purpose.
Persistence & Privilege
The skill is not forced-always and uses default autonomous invocation settings. This is normal, but be aware that allowing an agent to invoke the skill lets it turn on/off or change settings for devices on your LAN—expected for a home-automation skill but a potential privacy/availability consideration.
Assessment
This skill appears to be what it claims: a local-network Midea AC controller implemented in a small Python script. Before installing, verify the following: (1) inspect and update AC_IPS in scripts/midea_ac.py so it lists only your ACs' IPs (remove any unknown addresses); (2) install the dependency from PyPI (pip install msmart-ng) from a trusted environment; (3) be aware that granting the agent access to run this skill allows it to control the listed ACs on your LAN (turn on/off, change temps); (4) because the source is unknown, consider reviewing the code yourself or running it in a restricted environment if you are uncomfortable. The script does not request external credentials or appear to exfiltrate data.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.0.3
Download zip
latestvk9742hp98pg074qxqkjeysxjf580jabt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Midea Smart Home Control

Control Midea ACs via the msmart.

How to Use

Skill path: ~/.openclaw/skills/midea_ac

AC Control Commands

# Navigate to skill directory
cd ~/.openclaw/skills/midea_ac

# Check status
python scripts/midea_ac.py bedroom status

# Turn on/off
python scripts/midea_ac.py bedroom on
python scripts/midea_ac.py bedroom off
python scripts/midea_ac.py bedroom toggle

# Set operation mode
python scripts/midea_ac.py bedroom --mode cool

# Set target temperature
python scripts/midea_ac.py bedroom --temperature 26

# Set fan speed
python scripts/midea_ac.py bedroom --fan_speed low

# Set aux hear mode
python scripts/midea_ac.py bedroom --aux_mode on

# Set multiple parameters at once
python scripts/midea_ac.py bedroom --mode heat --temperature 28 --fan_speed medium --aux_mode off

Natural Language Understanding

When the user says the following, execute the corresponding command:

User SaysCommand
Turn on the <room-name> AC / open ACscripts/midea_ac.py <room-name> on
Turn off the <room-name> AC / close <room-name> ACscripts/midea_ac.py <room-name> off
Toggle the <room-name> ACscripts/midea_ac.py <room-name> toggle
Warmer / more warmCheck status first, then increase temperature by 2 - 10 degrees
Cooler / less heatCheck status first, then decrease temperature by 2 - 10 degrees
Full speed / maximumif mode is heat: scripts/midea_ac.py <room-name> --temperature 30 --fan_speed max, if mode is cool: scripts/midea_ac.py <room-name> --temperature 16 --fan_speed max
Minimum speedscripts/midea_ac.py <room-name> --fan_speed low
<room-name> AC status / what's the <room-name> statusscripts/midea_ac.py <room-name> status

Before Executing

  1. Navigate to skill directory: cd ~/.openclaw/skills/midea_ac
  2. Run with uv: python scripts/midea_ac.py <room-name> <command>
  3. Report the result to the user after execution

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…