Edith
v1.0.0Set up Edith smart glasses as an OpenClaw channel. Run this when the user wants to connect their smart glasses to OpenClaw, mentions "Edith glasses", or prov...
⭐ 0· 94·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (connect Edith smart glasses) matches the actions it instructs: check/install an OpenClaw plugin, add a channel using a link code, and restart the gateway. There are no unrelated credentials, binaries, or exotic requirements.
Instruction Scope
SKILL.md directs the agent to run local commands (ls, grep, openclaw CLI) and to read/modify ~/.openclaw/openclaw.json and restart the gateway. These file and commands are exactly what a channel setup would need; the instructions do not request unrelated system data.
Install Mechanism
This is an instruction-only skill with no install spec or bundled code. The actual plugin installation is delegated to the local 'openclaw plugins install' CLI, which is appropriate. No remote archive downloads or custom installers are performed by the skill itself.
Credentials
The skill requests no environment variables or credentials. However, the troubleshooting snippet hardcodes an 'appUrl' pointing to https://edith-production-a63c.up.railway.app — the agent will configure OpenClaw to route the channel to that third-party endpoint. This is plausible for a channel plugin but is a privacy/third-party trust consideration.
Persistence & Privilege
The skill is user-invocable and not forced always-on. Its actions modify the user's OpenClaw config and restart the gateway (expected for channel setup). It does not request persistent elevated privileges or attempt to change other skills' configs beyond entries containing 'edith' in troubleshooting (which may be blunt but scoped).
Assessment
This skill appears to do what it says: install/configure an OpenClaw channel and write to ~/.openclaw/openclaw.json. Before running it (or letting an agent run it autonomously):
- Verify the plugin origin: inspect the 'openclaw-edith-glasses' package code or repository if possible before installing.
- Back up your OpenClaw config (~/.openclaw/openclaw.json) before making changes so you can restore it if something goes wrong.
- Note the hardcoded backend URL (edith-production-...railway.app). Confirm you trust that third-party service because your glasses' data (or channel traffic) may route through it.
- Provide the link code only to a trusted flow; the code is what authorizes the glasses to connect.
- Prefer to run the listed commands yourself or review them with a human operator rather than allowing an autonomous agent to execute them without review.
If you want a higher-assurance judgment, provide the source for the 'openclaw-edith-glasses' package or the plugin repository so the package contents and the backend usage can be audited.Like a lobster shell, security has layers — review code before you run it.
latestvk9735hvfbs4bskysdb9v6598ks83nbyj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.