ClawHub

Imou Open Device Video

v1.0.1

imou / Imou / 乐橙 / lechange 设备视频与录像技能。支持实时预览 live HLS、本地/云录像片段查询、录像回放 HLS。 Imou/Lechange device video skill for live HLS, local/cloud record clips, and playb...

⭐ 0· 126·0 current·0 all-time
by@imou-openplatform
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Imou device live HLS, record/query/playback) match the code and SKILL.md. Requested env vars (IMOU_APP_ID, IMOU_APP_SECRET, IMOU_BASE_URL) are exactly those required to call the Imou Open API. No unrelated binaries, services, or credentials are requested.
✓
Instruction Scope
SKILL.md and the Python scripts only instruct the agent to obtain an access token and call Imou Open API endpoints (bindDeviceLive, liveList, queryLocalRecords, queryCloudRecords, createDeviceRecordHls). The scripts read only the declared environment variables and do not reference other system files, keys, or external endpoints beyond the configured IMOU_BASE_URL (defaulting to openapi.lechange.cn).
✓
Install Mechanism
No risky install steps; dependency is requests (pip). The SKILL.md suggests pip install requests and the metadata lists a pip install of requests — proportional and expected for a Python HTTP client. No downloads from arbitrary URLs or archives are present.
✓
Credentials
The skill requires only appId, appSecret, and base URL for the Imou API. Those are necessary to obtain tokens and sign requests; the number and type of environment variables are proportionate to the skill's stated functionality. The primary credential (IMOU_APP_ID) is appropriate. The code does not request unrelated secrets.
✓
Persistence & Privilege
always:false and the skill does not write persistent configuration or modify other skills. Tokens are fetched per run and not stored persistently by the skill. Autonomous invocation is allowed by default on the platform but is not combined with other concerning privileges here.
Assessment
This skill is coherent with its description: it calls the Imou / Lechange Open API and needs your Imou developer appId and appSecret plus the correct IMOU_BASE_URL. Before installing, ensure you: (1) only provide app credentials that you obtained from Imou (and revoke them if you suspect misuse), (2) run the skill in an environment with appropriate network controls if you require isolation, and (3) review the included scripts if you want to confirm there are no additional logging or telemetry paths. The skill will send your appId/appSecret and device identifiers to the configured IMOU_BASE_URL (the default is openapi.lechange.cn); it does not contact other third parties according to the code and documentation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ay3yd2e5j4yak515cgksbwn83p8tp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📹 Clawdis
EnvIMOU_APP_ID, IMOU_APP_SECRET, IMOU_BASE_URL
Primary envIMOU_APP_ID

Comments