Shelly

• Analyzed: May 11, 2026, 5:25 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3a928be9cd32a1d8291aca430eebd81f06bef011b0bb6ccec848a90b338348fa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The Shelly skill bundle is a well-structured tool for managing Shelly IoT devices via local RPC, WebSocket, and Cloud APIs. It includes robust safety protocols such as read-before-write verification, canary rollout strategies, and explicit user confirmation for high-impact actions (e.g., toggling relays). The skill manages its state locally in `~/shelly/` with appropriate file permissions and explicitly directs the agent to use environment variables for sensitive tokens rather than storing them in plaintext, showing a clear focus on security and operational reliability.