Thermostat
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: thermostat Version: 1.0.0 The OpenClaw AgentSkills bundle for 'thermostat' is benign. All files (SKILL.md, away.md, basics.md, efficiency.md, integration.md, troubleshooting.md) contain instructions and documentation solely focused on legitimate thermostat management, energy efficiency calculations, smart home integration guidance, and troubleshooting. There is no evidence of malicious intent, such as data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's core purpose or access unrelated sensitive data. The Home Assistant YAML examples in `integration.md` are for standard thermostat automations and do not suggest malicious activity.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If connected to smart-home tools, the agent may change thermostat settings when asked.
The skill may instruct an agent to use available thermostat controls to change a physical device. This is disclosed and central to the purpose, but users should notice that it can alter home temperature settings.
**Smart thermostats:** Adjust via voice, app command, or API integration.
Confirm the target thermostat or zone, desired temperature, mode, and duration before applying changes.
A connected smart-home account or tool could view thermostat sensor state and modify HVAC settings or automations.
The Home Assistant integration guidance involves broad thermostat control and sensor access. This is expected for the stated smart-home purpose, but it depends on separately granted platform permissions.
Home Assistant | Full control: temps, modes, schedules, automations, sensor data
Use the least-privileged smart-home access available and verify changes in the platform before relying on them.
An incorrect automation could repeatedly set the wrong temperature after the initial setup.
The skill provides examples for persistent Home Assistant automations that can repeatedly change thermostat settings based on occupancy. This is purpose-aligned, but a bad configuration could keep affecting comfort or energy use.
**Auto-away when everyone leaves:** ... service: climate.set_temperature ... temperature: 62
Review and test automations, confirm entity names and setpoints, and keep an easy way to disable or revert them.