Back to skill
Skillv1.0.0
VirusTotal security
Tuya Smart · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:10 AM
- Hash
- 16adf036cde4a6ae7a5f90f5cd6f0ad2fe5474fa044cf393c7505121bcfd9bf8
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: tuya Version: 1.0.0 The Tuya Smart skill bundle is a well-structured integration for managing Tuya IoT devices via official cloud APIs. It includes comprehensive documentation for authentication (HMAC-SHA256 signing), device discovery, and safety-conscious execution workflows (read-before-write, dry-runs, and user confirmation for high-impact actions). The setup process in `setup.md` uses standard shell commands to initialize a local state directory (`~/tuya/`) with restrictive file permissions (chmod 700/600), and the skill explicitly warns against exfiltrating secrets or using unauthorized endpoints.
- External report
- View on VirusTotal