Ipcam
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill appears aligned with IP camera control, but it can expose your camera password by printing full RTSP URLs.
Install only if you trust the skill with your camera credentials and private camera feeds. Avoid using the stream-url command unless you are comfortable exposing the full credential-bearing RTSP URL, and consider modifying it to redact passwords by default.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If this output is shown in a chat, terminal transcript, log, or command history, someone with access to it could reuse the camera credentials.
The stream-url command prints a complete RTSP URL containing the configured username and password.
echo "rtsp://${CAM_USER}:${encoded_pass}@${CAM_IP}:${CAM_RTSP_PORT}/${stream_path}" ... stream-url|url) rtsp_url "${1:-main}"Redact credentials by default, for example rtsp://user:***@host/path, and require an explicit user-approved option before revealing a secret-bearing URL.
An agent using the skill can capture images/video or move a camera when asked, which may affect privacy or monitoring coverage.
The documented commands can record camera media, move PTZ hardware, change presets, and add discovered cameras. This is purpose-aligned, but high-impact if invoked unintentionally.
camera.sh snapshot ... camera.sh record 15 ... ptz.py move left ... ptz.py preset set 2 "Door" ... ptz.py discover --add
Use it only with cameras you own or administer, and review agent actions before allowing recording, preset changes, or camera movement.
Installation behavior depends on the current package repositories and may change over time.
The installer uses system package managers and installs an unpinned Python package. This is normal for setup, but it depends on external package sources.
sudo apt-get install -y ffmpeg ... "$VENV_DIR/bin/pip" install --quiet onvif-zeep
Install from trusted repositories, consider pinning Python dependency versions, and review the installer before running it.