Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Local Tuya Light Control

v1.0.0

Control local LSC/Tuya lamps and groups to turn on/off, set brightness, colors, white modes, query status, or onboard after repair or network changes.

0· 60·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ooxtcoo/fully-local-tuya-light-control-skill-lsc-connect-app-devices.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Local Tuya Light Control" (ooxtcoo/fully-local-tuya-light-control-skill-lsc-connect-app-devices) from ClawHub.
Skill page: https://clawhub.ai/ooxtcoo/fully-local-tuya-light-control-skill-lsc-connect-app-devices
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install fully-local-tuya-light-control-skill-lsc-connect-app-devices

ClawHub CLI

Package manager switcher

npx clawhub@latest install fully-local-tuya-light-control-skill-lsc-connect-app-devices
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the SKILL.md: all commands, file names (tuya_lamps.json, lampctl, lamp_control.py) and onboarding/repair flows are consistent with managing local Tuya/LSC lights.
Instruction Scope
The instructions explicitly read and update local project files (tuya_lamps.json, KEY_EXTRACTION.md, ONBOARDING.md) and run local binaries or Python scripts. This is expected for a local-device control skill, but it means the skill will access potentially sensitive local device keys and configuration files.
Install Mechanism
No install spec or external downloads are present — instruction-only skill that expects existing local binaries/scripts. This minimizes supply-chain risk.
Credentials
The skill declares no environment variables or external credentials, which is proportional. However, it does operate on local config files that likely contain device local_keys (sensitive). Access to those files is appropriate for the stated task but worth noting.
Persistence & Privilege
always:false and user-invocable:true — the skill does not request permanent/system-wide privileges. It edits only the stated local project files (tuya_lamps.json), which is consistent with its purpose.
Scan Findings in Context
[no_regex_findings] expected: The scanner found no code files to analyze; this is expected because the skill is instruction-only. Lack of regex hits is not evidence of safety but matches the skill form.
Assessment
This skill appears coherent for controlling locally installed Tuya/LSC lights, but it will read and update local configuration and key files. Before installing or invoking it: 1) verify the lampctl binary or the Python scripts are ones you trust and are located at the paths listed; 2) inspect tuya_lamps.json, KEY_EXTRACTION.md, and ONBOARDING.md to confirm they don't contain unexpected secrets or links; back up tuya_lamps.json before allowing modifications; 3) be aware local_key values in these files are sensitive (treat like device credentials); 4) don't run unknown binaries or copy this SKILL.md into an environment where those paths point to untrusted code; and 5) if you want stricter control, run commands manually or in a sandbox rather than letting an agent invoke them autonomously.

Like a lobster shell, security has layers — review code before you run it.

latestvk97506qefmxtv0v1a3v561ezn584ykja
60downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

This skill may be installed outside the Tuya project directory, so do not assume the project root is relative to this SKILL.md.

Use these default project locations first:

  • This Maschine - Windows: C:\Users\1111\.openclaw\workspace\tuya-lights
  • Windows: %USERPROFILE%\.openclaw\workspace\tuya-lights
  • Linux / Android / Termux: ~/src/tuya-lights

If the local installation uses a different location, adjust this SKILL.md to match the actual project path.

Prefer the Go CLI variant:

  • Windows: lampctl.exe
  • Linux / Android / Termux: lampctl

Use Python only as fallback when the CLI binary is not available.

Source of truth

  • Registry: tuya_lamps.json
  • Preferred CLI: lampctl.exe (Windows) or lampctl (Linux/Android)
  • Python fallback: lamp_control.py
  • Single-device probe: tuya_test_lamp.py
  • Recovery notes: KEY_EXTRACTION.md
  • New-device flow: ONBOARDING.md

Command patterns

Windows PowerShell / CMD (ohne cd, direkt mit .):

.\lampctl.exe stehlampe on
.\lampctl.exe stehlampe brightness --value 50
.\lampctl.exe stehlampe color --value rot
.\lampctl.exe kitchen off
.\lampctl.exe all off
.\lampctl.exe vorzimmer on

# Linux / Android / Termux (mit cd)
cd ~/src/tuya-lights && lampctl stehlampe on
cd ~/src/tuya-lights && lampctl stehlampe brightness --value 50
cd ~/src/tuya-lights && lampctl stehlampe color --value red
cd ~/src/tuya-lights && lampctl küche off
cd ~/src/tuya-lights && lampctl all off
cd ~/src/tuya-lights && lampctl vorzimmer on

# Python fallback only if CLI is unavailable
python lamp_control.py stehlampe on

Natural language mapping

  • an -> on
  • aus -> off
  • 50% -> brightness --value 50
  • rot/blau/grün/... -> color --value <name>
  • warmweiß -> warmwhite
  • kaltweiß -> coldwhite
  • alle Lampen -> group all
  • Vorzimmer -> group vorzimmer

Onboarding / repair

If a lamp was repaired, re-paired, or moved to another network, assume the local_key may have changed. Read KEY_EXTRACTION.md and ONBOARDING.md, refresh the key, test with the preferred CLI first (lampctl <lamp> status), then use tuya_test_lamp.py --probe if Python fallback is needed, and finally update tuya_lamps.json.

Portability note

This skill intentionally prefers explicit standard project paths so it can still work after being copied into a separate OpenClaw skills directory. If a local installation uses a different layout, update this SKILL.md so the binary and project paths match that environment.

Current live lamps

  • kitchen
  • livingroom_floor
  • vorzimmer1
  • vorzimmer2
  • vorzimmer3
  • vorzimmer4

Live groups

  • all
  • vorzimmer

Discover devices

lampctl discover

  • Beispiel für diese Maschiene: C:\Users\1111\.openclaw\workspace\tuya-lights\lampctl.exe" stehlampe off

Comments

Loading comments...