Dyson Fan Control
v0.1.0Control Dyson air purifiers, fans, and heaters via local MQTT. Use when asked to control Dyson devices, adjust fan speed, set temperature/heat, enable oscillation, or check room temperature/humidity. Requires being on the same WiFi network as the device.
⭐ 5· 1.9k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (local control of Dyson devices) matches the contained code and README: the CLI uses libdyson to fetch account-backed credentials then controls devices locally via MQTT/mDNS and direct TCP. Required functionality (setup, discovery, status, control) is present and coherent.
Instruction Scope
SKILL.md instructs running the dyson CLI from a local venv and shows commands that will perform account setup (OTP + password prompt), discovery, and local control. Asking the user to provide their Dyson account email/password and OTP during 'dyson setup' is expected for fetching device credentials, but is sensitive — the skill will store credentials in ~/.dyson/config.json as described.
Install Mechanism
There is no install spec in the registry entry (instruction-only), but the bundle includes a pyproject and source files and README pointing to a GitHub pip install. This is reasonable for a CLI package, but users should prefer installing from the upstream GitHub repository or PyPI rather than running unverified code shipped in a skill bundle.
Credentials
The skill requests no environment variables, system config paths, or unrelated credentials. It does require interactive Dyson account credentials (OTP + password) during setup and stores device credentials locally (~/.dyson/config.json) — this is proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills. Storing credentials in the user's home directory is normal for this type of CLI.
Assessment
This skill appears to do what it says: it uses your Dyson account to fetch device credentials, then controls devices locally over your Wi‑Fi using MQTT/mDNS. Before installing or running: 1) Confirm the code origin — prefer installing from the upstream GitHub repository or PyPI referenced in the README rather than running code from an unknown registry source. 2) Understand that 'dyson setup' will prompt for your Dyson account email, OTP and password and will save device credentials to ~/.dyson/config.json — if you are uncomfortable storing tokens locally, do not proceed. 3) Review the libdyson(-neon) dependency for trustworthiness. 4) The CLI only controls devices on the same LAN; no unexpected external endpoints or env-var exfiltration were observed in the provided files.Like a lobster shell, security has layers — review code before you run it.
latestvk97074ndtgvccva3j74106b5ks7yptbn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.