Aqara Agent Skills

What to consider before installing: 1) This skill will ask you to paste your Aqara API credential (aqara_api_key) into the chat; that value will be saved to skills/aqara-agent/assets/user_account.json on disk — treat that file as sensitive. 2) The default API endpoint is agent.aqara.com, but the code honors AQARA_OPEN_HOST if set; do not change that env var to an untrusted host (a malicious host could collect credentials). 3) Review the included scripts (scripts/aqara_open_api.py and scripts/save_user_account.py) so you are comfortable with where credentials are written and how network calls are made; the network calls use the requests library and go to the configured base URL. 4) The package installs ordinary PyPI packages; if you will run it in a shared environment, consider running the skill in an isolated environment (virtualenv/container) and inspect assets/user_account.json after use. 5) Minor inconsistencies: a runtime error message in aqara_open_api.py mentions an AQARA_API_KEY environment variable even though the code reads the local JSON; this is informational and not hostile, but you may want to confirm how you prefer to provide credentials (file vs env). Overall the skill appears coherent with its stated purpose; proceed only if you trust the skill source and are comfortable with local storage of your Aqara API key.