VacuumControl
v1.3.0教 OpenClaw 如何安装、配置和使用 roborock-cli（石头扫地机 CLI 控制工具）。 涵盖：uv 安装、认证流程、15 个 CLI 命令的使用、设备控制、错误诊断与恢复。 当用户提到"扫地机"、"roborock"、"扫地"、"拖地"、"清洁机器人"、"回充"、"集尘"、 "洗拖布"、"勿扰模式...
⭐ 1· 238·0 current·0 all-time
by@jru001
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the content: SKILL.md and references/commands.md focus on installing, authenticating, querying, controlling, and scripting roborock-cli. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions stay within the stated purpose (install, auth, commands, troubleshooting). They reference only roborock-cli cache files (~/.cache/roborock-cli/*) and describe interactive auth behavior. Notably, auth is explicitly interactive (requires TTY) so the agent must not attempt automated non-interactive auth runs.
Install Mechanism
Although the skill itself has no install spec, the runtime instructions tell the agent to run remote installers: curl -LsSf https://astral.sh/uv/install.sh | sh and PowerShell irm https://astral.sh/uv/install.ps1 | iex, followed by uv tool install roborock-cli. Download-and-execute from remote URLs carries elevated risk and should be verified (source authenticity, integrity) before executing.
Credentials
The skill requests no environment variables or credentials. It documents two cache-related env vars (ROBOROCK_AUTH_CACHE, ROBOROCK_DEVICE_CACHE) which are reasonable for configuring where auth and device caches live.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges or modify other skill configs. Autonomous invocation is allowed (default), but the SKILL.md limits interactive auth to a TTY, which constrains some autonomous actions.
Assessment
This skill appears to be what it claims: instructions for installing and using roborock-cli. Before installing or running commands, verify the install scripts and binaries it tells you to execute — the guide uses curl | sh and PowerShell 'irm | iex' to install 'uv' (and then uv installs roborock-cli), which will fetch and run code from remote servers. If you prefer safer steps: manually inspect the installer URL, install uv and roborock-cli yourself from their official project pages, or run the install commands in a controlled environment. Note that authentication is interactive and stores credentials in ~/.cache/roborock-cli/user_data.json — treat that file as sensitive. If you do not want the agent to run shell installs or perform interactive auth, do not invoke this skill with autonomous shell access.Like a lobster shell, security has layers — review code before you run it.
latestvk97fmf3aggx9wtbrq388adtnp18333tg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.