ClawHub

Hik Cloud Device Channel Management

v1.0.0

调用海康云眸开放平台设备通道管理接口，包括查询设备下通道列表、同步设备下通道、修改通道名称和同步设备通道名称。用户提到通道列表、通道同步、通道重命名、channelNo、channelName 等场景时使用。本技能自动处理 access_token 获取与刷新，不向用户暴露 token 调用流程。

⭐ 0· 70·0 current·0 all-time
byhik-cloud-open@liunian1010
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested binaries and env vars (python3, HIK_OPEN_CLIENT_ID, HIK_OPEN_CLIENT_SECRET). The script implements token fetch, caching, and the four device-channel APIs described; there are no unrelated cloud providers or extraneous credentials requested.
ℹ
Instruction Scope
SKILL.md instructs running the included Python script to list/sync/rename channels and documents token resolution priorities. The script accesses network endpoints, environment variables (HIK_*), and reads/writes a token cache (~/.cache/hik_open/token.json). This behavior is expected for an API helper, but it means the skill will store tokens on disk and may be pointed at an arbitrary base URL if overridden.
✓
Install Mechanism
No install spec — the skill is instruction + bundled script and requires an existing python3 binary. No downloads or external installers are performed.
ℹ
Credentials
Declared env vars (client id/secret, optional access token, optional base URL) are proportional to the Hik OpenAPI purpose. The script caches the fetched access_token to a file in the user's home directory in plaintext; this is functional but a sensitive artifact users should protect (file permissions, shared environments).
✓
Persistence & Privilege
always is false and the skill does not request system-wide privileges or modify other skills. Its persistent side-effect is only the token cache file and optional OpenClaw skill config entries as documented.
Assessment
This skill appears to do what it says: call Hik Cloud device-channel APIs using the provided Python helper. Before installing, verify you are willing to provide HIK_OPEN_CLIENT_ID and HIK_OPEN_CLIENT_SECRET (or an access token) and accept that the tool will store an access_token cache at ~/.cache/hik_open/token.json. Do not set a custom --base-url or HIK_OPEN_BASE_URL to untrusted endpoints (that would redirect API calls to arbitrary servers). If you share the machine or environment, restrict access to the cache file (and avoid putting secrets in global shell profiles). If you want extra assurance, review the included script file; it is small and readable and implements the token flow and API calls described.

Like a lobster shell, security has layers — review code before you run it.

latestvk9789qmnf32c9z76p2epeqfgvn83g9t1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎛️ Clawdis
Binspython3
EnvHIK_OPEN_CLIENT_ID, HIK_OPEN_CLIENT_SECRET
Primary envHIK_OPEN_CLIENT_SECRET

Comments