ClawHub

Google Home Control

v1.0.3

Control smart home devices (lights, TV, etc.) via the Google Assistant SDK. Use when the user wants to trigger home automation commands.

⭐ 5· 2.7k·4 current·4 all-time
by@tvdofficial
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the included script and instructions. The skill needs Google OAuth credentials and the Google Assistant API to operate — which is appropriate for controlling Google Home devices.
✓
Instruction Scope
SKILL.md limits actions to creating a Google Cloud project, obtaining OAuth credentials, creating a Python virtualenv, installing Google Assistant libraries, and running the bundled control.py. The script only reads the declared credentials path or GOG_HOME_CREDS, refreshes a token, and calls embeddedassistant.googleapis.com. There are no instructions to read unrelated files or exfiltrate data.
✓
Install Mechanism
There is no registry install spec (instruction-only). The README asks the user to pip-install official Google packages into a local venv — a normal, low-risk developer workflow. No downloads from untrusted URLs or archive extraction are present.
✓
Credentials
The skill does not request unrelated credentials. It requires the user's Google OAuth client_secret/refresh token (stored in ~/.config or via GOG_HOME_CREDS) — this is necessary and proportionate for the Google Assistant API. The SKILL.md documents these requirements.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills or system-wide settings.
Assessment
This skill needs a Google OAuth client and the refresh token that lets it act as your Google Assistant — granting it allows the skill to send commands to devices you control. Only install if you trust the skill's author and are comfortable storing credentials at ~/.config/google-oauthlib-tool/credentials.json (or pointing GOG_HOME_CREDS to them). Run the provided Python virtualenv in an isolated environment, review the included control.py before use, and revoke the OAuth client/refresh token in your Google Console if you stop using the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk9728ksz8j13q9mkck2d1dbt818093t2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments