Carrera HYBRID BLE Controller

Control Carrera HYBRID RC cars (by Sturmkind) via BLE. Use when user wants to drive, steer, control lights, write text with, or reverse-engineer Carrera HYBR...

Security Scan

This skill is internally consistent: it provides BLE protocol docs and a Python script to control Carrera HYBRID RC cars, and it only asks you to install BLE-related Python packages — there are no unrelated credentials, network endpoints, or unexplained install steps.

Purpose & Capability

Name/description match the included files: protocol documentation and a BLE drive script. Required libraries (bleak, bless) and Linux/BlueZ are appropriate for BLE control and MITM capture. Minor note: the SKILL.md claims 'Telegram remote control' support but doesn't include a ready Telegram bot implementation — it only suggests mapping callbacks to run the script.

Instruction Scope

Instructions stay within the stated purpose (driving, reverse-engineering via BLE). They include a MITM proxy method using 'bless' (explicitly describing how to create a fake peripheral and log writes) and a small Bleak-based scanner snippet; both are relevant to reverse-engineering but the MITM guidance can be used to intercept another person's device — it's within scope but ethically/legal considerations apply. The skill does not read unrelated system files or request extra environment variables.

Install Mechanism

No install spec (instruction-only) and the README asks to pip install bleak and bless. This is proportionate: bleak is the standard Python BLE client; bless is referenced for MITM capture. No downloads from untrusted URLs or archives are included.

Credentials

The skill declares no environment variables, no credentials, and no config paths. The code uses a hard-coded ADDRESS placeholder that the user must edit or replace with a scanner-run value.

Persistence & Privilege

always is false and the skill does not request persistent system privileges or modify other skills/configs. The skill is user-invocable only and does not ask to run autonomously with elevated presence.

Assessment

This package appears to do what it claims: control and reverse-engineer Carrera HYBRID cars via BLE. Before installing: (1) Review and run in a Python virtualenv and inspect the bless package source if you plan to use the MITM features. (2) Edit the ADDRESS in scripts/carrera_drive.py or use the provided scanner snippet to find your car. (3) Be aware the MITM instructions describe intercepting an app-to-car connection — do not perform that on devices you do not own or have explicit permission to analyze. (4) No external network endpoints or secrets are requested by the skill, but any code you run has access to your local system and Bluetooth adapter, so run only on a trusted machine.

Control Sturmkind Carrera HYBRID RC cars via BLE from any Linux machine with Bluetooth.

Requirements

• Python 3.10+, bleak (BLE), bless (MITM proxy)
• Linux with BlueZ and a BLE-capable adapter
• Install: pip install bleak bless

Protocol

20-byte packets sent every ~50ms via Nordic UART TX (6e400002-b5a3-f393-e0a9-e50e24dcca9e):

BF 0F 00 08 28 00 [GAS] [STEER] 86 00 72 00 02 FF [LIGHT] 00 00 00 00 [CRC8]

Byte	Function	Values
6	Gas	0xDF=idle, higher=forward (wraps 0xFF→0x00→0x11=max), lower=reverse
7	Steering	0x00=center, 0x01-0x7F=right, 0x81-0xFF=left
14	Light	0x82=on, 0x80=off
19	CRC-8	Poly=0x31, Init=0xFF over bytes 0-18

Scripts

scripts/carrera_drive.py — Drive Controller

# Basic commands
python3 scripts/carrera_drive.py forward [gas] [duration_ms]
python3 scripts/carrera_drive.py back [gas] [duration_ms]
python3 scripts/carrera_drive.py left [gas] [duration_ms]
python3 scripts/carrera_drive.py right [gas] [duration_ms]
python3 scripts/carrera_drive.py spin [gas] [duration_ms]
python3 scripts/carrera_drive.py light_on
python3 scripts/carrera_drive.py light_off
python3 scripts/carrera_drive.py demo

• gas: 1-50 (default 40)
• duration_ms: milliseconds (default 3000)
• Edit ADDRESS in script to match your car's BLE address

Telegram Remote Control

Send inline button messages for interactive control:

⬆️ Vorwärts  |  ⬇️ Rückwärts
↩️ Links      |  ➡️ Rechts
🔄 Spin!      |  🏁 Demo
💡 Licht AN   |  🌑 Licht AUS

On callback car_forward, car_back, etc. → run the corresponding carrera_drive.py command.

Calibration

At Gas=20, Steer=80: one full circle ≈ 7100ms. Adjust timing for your surface/car.

Finding Your Car

python3 -c "
import asyncio
from bleak import BleakScanner
async def scan():
    devices = await BleakScanner.discover(5)
    for d in devices:
        if 'HYBRID' in (d.name or ''):
            print(f'{d.name} @ {d.address}')
asyncio.run(scan())
"

Protocol Details

See references/protocol.md for full reverse-engineering notes and MITM capture analysis.