ClawHub

when-clock-skill

v1.0.1

Control WHEN/WHEN Voice LAN clock devices. Supports voice time announcement, weather broadcast (WHEN Voice only), alarm CRUD, and countdown timer. Use --devi...

⭐ 0· 78·0 current·0 all-time
by@master-gong
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included files and manifests: Python scripts + config.json + protocol docs target LAN WHEN/WHEN Voice clocks. The required inputs (a config.json device IP, CLI args) are appropriate for the stated functionality; no unrelated cloud credentials, binaries, or install steps are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to load config.json and make HTTP GET/POST calls to the device's local IP to query/update alarms, chime, weather and timers — this is consistent with the skill purpose. Note: the included protocol docs describe many device APIs (network config, Wi‑Fi password, login configuration) that are broader than the alarm/chime/timer flows; while expected for device integration docs, it means the underlying device API surface can change device network/login settings if the code were extended or modified.
✓
Install Mechanism
No install spec and no external downloads are present; the package is plain Python scripts using the standard library. This is low risk and proportionate to the described functionality.
✓
Credentials
The skill requires no environment variables or external credentials. It uses a local config.json with device IPs/ports/timeouts — appropriate and minimal for LAN device control. The docs do show device APIs that can expose/change Wi‑Fi credentials, but the skill itself does not request unrelated secrets.
✓
Persistence & Privilege
always is false and the skill does not request to modify other skills or global agent settings. Autonomous invocation is allowed by default (normal for skills) but not combined with any elevated privileges in this package.
Assessment
This package appears to be what it claims: a CLI tool to control WHEN / WHEN Voice LAN clocks. Before installing and running it: (1) inspect config.json and only list devices you own (the tool will talk to the IPs listed there); (2) review when.py and when_voice.py to confirm they only call the alarm/chime/weather endpoints you expect (the device HTTP API also supports Wi‑Fi and login changes — avoid running the skill against devices you don't control); (3) run it on a machine in the same LAN and monitor network traffic on first use to confirm behavior; (4) if you plan to allow an agent to invoke skills autonomously, be aware the skill can make arbitrary local HTTP calls to devices listed in config.json — keep that list minimal and under your control. If you want, I can scan the full source files (when.py / when_voice.py / when_common.py) line‑by‑line for any unexpected network endpoints or hidden behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk975bjy47xtecc8g2gyykyev7h83exw3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments