Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
HomePod
v1.0.0Set up, troubleshoot, and optimize HomePod and HomeKit audio workflows with reliable Siri control and room-aware playback tuning.
⭐ 0· 369·1 current·1 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (HomePod/HomeKit setup and troubleshooting) match the skill contents: runbook text, diagnostics, and direct-control guidance. References to atvremote and local network control are appropriate for Apple TV/HomePod control and are called out in the runbook as required preconditions.
Instruction Scope
SKILL.md and auxiliary files limit actions to diagnostics, local network control, and notes stored under ~/homepod/. Mutating actions require explicit target and user confirmation; instructions emphasize read-only checks first and guardrails for destructive changes. No instructions ask the agent to read unrelated system files or exfiltrate data.
Install Mechanism
No install spec or code files — instruction-only skill — so nothing is downloaded or installed by the skill itself. The runbook expects third-party tools (e.g., atvremote) to be present but does not attempt to install them.
Credentials
The skill requests no environment variables, credentials, or config paths. It documents local storage under ~/homepod/ and explicitly forbids storing pairing secrets in memory. Requested access is proportional to the stated purpose.
Persistence & Privilege
The skill persists troubleshooting state and logs in the user's home directory (~/homepod/). This is reasonable for a troubleshooting skill, but it's persistent data on disk — users should be aware and review stored notes. The skill is not always-enabled and does not request elevated system privileges.
Assessment
This skill appears coherent and low-risk: it only contains runbooks and will create/read files under ~/homepod/ and use local-network commands (e.g., atvremote) when you explicitly ask it to run mutating commands. Before installing: 1) ensure you trust the skill source; 2) confirm you are comfortable with a folder ~/homepod/ being created and storing troubleshooting notes; 3) install and verify any required third-party tools (like atvremote) yourself — the skill will not install them; 4) avoid letting the agent run mutating commands without explicit confirmation and never let it store pairing secrets. If you want extra assurance, open the SKILL.md and the runbooks to verify the exact commands it suggests before using direct-control flows.Like a lobster shell, security has layers — review code before you run it.
latestvk972kwr05j9mhxyvs5j2t08a51821ppq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
H Clawdis
OSmacOS · Linux · Windows