Back to skill
Skillv1.0.5
VirusTotal security
Tuya Cloud · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:26 AM
- Hash
- 492be35c04cadb118c827b3fdcc36614fb6b8aa674884091097671ee8c2cea00
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: tuya-cloud Version: 1.0.5 The tuya-cloud skill bundle is a legitimate tool for managing Tuya/Smart Life IoT devices via the Tuya Cloud API and local LAN. The core logic in scripts/tuya_controller.py utilizes the reputable tinytuya library to perform standard operations such as listing devices, reading sensor data, and sending commands to switches or valves. The SKILL.md file provides clear, functional instructions for an AI agent without any evidence of prompt injection or malicious intent. While the skill requires sensitive API credentials (TUYA_ACCESS_SECRET), they are used exclusively for authenticating with official Tuya endpoints, and there are no indicators of data exfiltration, unauthorized execution, or persistence mechanisms.
- External report
- View on VirusTotal