ST200TH 温湿度变送器
v1.0.2立控 ST200TH 温湿度变送器全功能管理技能——查询温湿度/气压/海拔、查看设备信息(IP/型号/固件)、修改配置、补偿校准、重启设备、OTA升级。支持多设备管理，首次使用记住 MAC 后续免输入。
⭐ 0· 74·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binaries (python3), dependency (paho-mqtt), and the provided script all match the stated purpose of full MQTT-based management of ST200TH devices. The MQTT broker, topics, and commands in the code correspond to device management/OTA/configuration operations described in SKILL.md.
Instruction Scope
SKILL.md instructs the agent to run the provided Python script with device MACs and manage devices; the instructions do not ask for unrelated files/credentials. Important runtime behaviors to note: the skill will connect to an external MQTT broker (mqtt.likong-iot.com) and publish/subscribe device commands/responses, and it persists device entries (MACs/names) to a local devices.json file in the skill directory.
Install Mechanism
Installation pulls paho-mqtt via the package manager (PyPI). No arbitrary remote download URLs or extracted archives are used; this is a standard Python dependency installation.
Credentials
The skill declares no required environment variables and requests no user secrets. However, the script contains hardcoded MQTT connection parameters (broker host, port, username 'public', password 'Aa123456'), which means the skill will communicate using those built-in credentials rather than asking the user for keys. This is coherent with its purpose but is a privacy/operational consideration (all device traffic goes through that broker with those credentials).
Persistence & Privilege
The skill is not always-enabled and does not require elevated privileges. It persists a local devices.json (in the skill directory) to remember MACs/names—expected for the 'remember MAC' feature and limited in scope.
Assessment
This skill appears to do what it says: manage ST200TH devices over MQTT. Before installing, consider:
- Network/privacy: the script connects to mqtt.likong-iot.com using embedded credentials (username 'public', password 'Aa123456'). Device commands and returned device info (IP, MAC, firmware, sensor readings) will pass through that broker. If you require privacy or control, run the script on an isolated network or modify it to use your own broker/credentials.
- Local persistence: MAC addresses and device names are stored in devices.json in the skill directory. If you share the agent workspace, this file could reveal device identifiers.
- OTA safety: OTA URIs are HTTP-only and provided by the user; ensure the URI is trustworthy and reachable on your network. HTTP firmware downloads are unencrypted—avoid using public HTTP URLs for sensitive firmware updates.
- If you don't trust the vendor broker or want stricter control, consider editing the script to accept broker/credentials via environment variables or to point to a broker you control.
Overall, the skill is internally consistent with its description; weigh the privacy/network implications before use.Like a lobster shell, security has layers — review code before you run it.
humidityvk97fq77gg3qc2cw2tfnd1x3rax83ycpziotvk97fq77gg3qc2cw2tfnd1x3rax83ycpzlatestvk97fq77gg3qc2cw2tfnd1x3rax83ycpzlikongvk97fq77gg3qc2cw2tfnd1x3rax83ycpzmqttvk97fq77gg3qc2cw2tfnd1x3rax83ycpzsensorvk97fq77gg3qc2cw2tfnd1x3rax83ycpztemperaturevk97fq77gg3qc2cw2tfnd1x3rax83ycpz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌡️ Clawdis
Binspython3
Install
uv
uv tool install paho-mqtt