Imou Open Device Manage
v1.0.1Imou/乐橙设备管理。支持查看账号设备列表、设备详情（序列号/型号/在离线/名称/通道）、按序列号查询、修改设备或通道名称。 Use for requests in any language (e.g. 中文/English) about listing or managing Imou/乐橙 cloud de...
⭐ 0· 100·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe Imou device listing and rename operations and the package only requires IMOU_APP_ID and IMOU_APP_SECRET (credentials appropriate for Imou Open API). Requested capabilities (list/get/rename) map to the code and referenced Imou endpoints.
Instruction Scope
SKILL.md and scripts specify only the actions necessary to obtain a token and call Imou APIs. The instructions do not direct reading unrelated files or sending data to third parties. One minor scope note: SKILL.md treats IMOU_BASE_URL as required (and the code reads it), but the registry's top-level required env list omitted IMOU_BASE_URL.
Install Mechanism
No external binary downloads or risky installers; dependencies are a simple Python requests requirement. The registry summary said 'No install spec', but SKILL.md metadata includes a pip install for requests and there is a requirements.txt — this is a low-risk inconsistency but not a security problem.
Credentials
Only IMOU_APP_ID and IMOU_APP_SECRET are required (appropriate). The code also uses IMOU_BASE_URL if set (or a sensible default); IMOU_BASE_URL is used only to contact the Imou API. Registry metadata omitted IMOU_BASE_URL even though SKILL.md and the code treat it as required/configurable.
Persistence & Privilege
The skill is instruction-only with no elevated platform privileges (always:false). It does not modify other skills or system-wide config and does not request persistent presence.
Assessment
This skill appears coherent and implements exactly what it claims: it exchanges your IMOU_APP_ID and IMOU_APP_SECRET for an Imou access token and calls Imou endpoints to list/get/rename devices. Before installing: (1) ensure you trust the skill source — it will transmit your appId/appSecret to whatever IMOU_BASE_URL is configured; (2) prefer using a limited or test developer app credential rather than reusing high-privilege credentials; (3) confirm or set IMOU_BASE_URL to the official Imou API endpoint (the code defaults to https://openapi.lechange.cn); (4) note the small manifest inconsistencies (IMOU_BASE_URL is used but not declared in registry env list, and SKILL.md lists a pip install even though registry shows no install spec) — these are implementation/metadata issues rather than security red flags. If you need higher assurance, review the included Python files locally to verify there are no modifications to endpoints or hidden network calls before providing credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97a807jmkhpt3tjbfcnv1vwqs8359sh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📋 Clawdis
EnvIMOU_APP_ID, IMOU_APP_SECRET
Primary envIMOU_APP_ID