Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Midea Air Conditioners
v0.0.3Control Midea ACs. Use this skill when the user wants to control ACs. Supports turning ACs on/off, setting temperature, setting fan speed, switching modes, and more.
⭐ 3· 2.3k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included Python script: it controls Midea ACs on the local network using the msmart library and hard-coded device IPs. No unrelated credentials, binaries, or services are requested.
Instruction Scope
SKILL.md maps natural-language intents to specific script commands and instructs running the included script from the skill directory. One minor concern: some NL mappings (e.g., "Warmer / more warm") leave a wide discretionary range ("increase by 2 - 10 degrees") that an agent must concretely choose; the script itself enforces temperature bounds (16–30°C). Otherwise the instructions remain within the stated purpose and do not ask the agent to read unrelated files or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only with an included script). The script depends on the public msmart-ng library (not bundled). No downloads or non-standard installers are referenced.
Credentials
The skill requires no environment variables, no credentials, and no config paths. It controls devices only via local IPs listed in the AC_IPS dict. Asking for local device IPs (hard-coded) is expected for this purpose.
Persistence & Privilege
The skill is not forced-always and uses default autonomous invocation settings. This is normal, but be aware that allowing an agent to invoke the skill lets it turn on/off or change settings for devices on your LAN—expected for a home-automation skill but a potential privacy/availability consideration.
Assessment
This skill appears to be what it claims: a local-network Midea AC controller implemented in a small Python script. Before installing, verify the following: (1) inspect and update AC_IPS in scripts/midea_ac.py so it lists only your ACs' IPs (remove any unknown addresses); (2) install the dependency from PyPI (pip install msmart-ng) from a trusted environment; (3) be aware that granting the agent access to run this skill allows it to control the listed ACs on your LAN (turn on/off, change temps); (4) because the source is unknown, consider reviewing the code yourself or running it in a restricted environment if you are uncomfortable. The script does not request external credentials or appear to exfiltrate data.Like a lobster shell, security has layers — review code before you run it.
latestvk9742hp98pg074qxqkjeysxjf580jabt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.