Micro-Doppler Life-Safety Engine

Detects elder falls and apnea using privacy-safe 60/77 GHz mmWave radar with real-time micro-Doppler STFT analysis for emergency alerts and response.

Security Scan

The skill's code, instructions, and requested credentials are consistent with its stated purpose (local DSP-based fall detection with optional Home Assistant actuation); it defaults to a dry-run and requires an explicit, local-only opt-in to perform real-world actions.

Purpose & Capability

The name/description (mmWave micro-Doppler fall detection + optional emergency actuation) matches the code and SKILL.md: the DSP pipeline is implemented locally and actuation is performed via Home Assistant REST calls. The manifest documents the same HA environment variables. Minor metadata inconsistency: registry metadata above lists no homepage/required env vars while manifest.json includes a homepage and documents S2_ENABLE_REAL_ACTUATION, HA_BASE_URL, and HA_BEARER_TOKEN.

Instruction Scope

SKILL.md and skill.py confine behavior to generating simulated/sensed signals, computing an STFT, detecting a fall, and optionally posting to Home Assistant. There are no instructions to read unrelated system files, exfiltrate data to unknown endpoints, or gather additional credentials. The code creates a local directory (s2_eldercare_vault) to store data.

Install Mechanism

No install specification is embedded in the registry (instruction-only). The SKILL.md tells users to pip install requirements.txt — a standard, low-risk dependency install from PyPI. No downloads from arbitrary URLs or archive extraction are used.

Credentials

The only sensitive inputs are Home Assistant-related (HA_BASE_URL and HA_BEARER_TOKEN) and a boolean to enable real actuation. Those are appropriate and proportional to the actuation feature. The skill defaults to Dry-Run and will not perform network POSTs unless S2_ENABLE_REAL_ACTUATION is explicitly set. Recommend using a least-privilege long-lived token and keeping HA on a trusted local network. Also note the registry metadata did not declare required env vars while the manifest does — verify manifest vs registry before use.

Persistence & Privilege

This skill does not request always:true, does not modify other skills or global agent settings, and does not run persistent background services. It only creates a local directory for data and runs when executed. Actuation is opt-in via an environment variable.

Assessment

This skill appears to do what it says: run a local DSP fall detector and optionally send commands to Home Assistant. Before enabling real actuation: 1) Keep S2_ENABLE_REAL_ACTUATION unset (Dry-Run) while you review and test behavior. 2) If you enable real actuation, only do so in a trusted, local network. 3) Create a Home Assistant token with minimal scope needed for the specific entities, and verify HA_BASE_URL points to your local instance. 4) Inspect and, if necessary, change the entity IDs (lock.room_802_main_door, light.room_802_all, fan.room_802_hvac) so they map to test devices first (avoid unlocking real doors during testing). 5) Confirm the manifest/registry metadata (homepage and declared env vars) with the publisher because the packaged manifest includes env var docs that the registry metadata did not list. If you want extra assurance, run the script in an isolated environment or sandbox and keep network access to your HA instance restricted.

🧓 S2-Eldercare-mmWave-Monitor: DSP & Secure Actuation Engine

S2 老年健康监测插件 (微多普勒 DSP 与安全物理致动版)

v1.1.0 | SecOps & Hardware Integration Edition (English / 中文)

Welcome to the Sensory Tentacle Series of the S2-SP-OS. This SKILL bridges high-resolution mmWave DSP with physical smart home actuation, heavily focused on user safety and zero-trust execution.

🛡️ 1. Security & Safety First (安全与执行声明) WARNING: Automatic actuation of physical environments (e.g., unlocking doors, overriding HVAC) carries inherent real-world risks. 警告：自动触发物理环境动作（如解锁大门、强启空调）具有固有的现实世界风险。

To comply with strict SecOps and safety standards, this SKILL operates in Dry-Run (Safe Mode) by default. 为了符合严苛的安全操作规范，本插件默认运行在安全沙盒模式（Dry-Run）下：

• When S2_ENABLE_REAL_ACTUATION=False (Default), the system runs the entire DSP algorithm (STFT, Fall Detection) but intercepts all outbound HTTP REST requests to the Home Assistant API. It only prints the routing intents to the console.
• 当环境变量为 False 时，系统将拦截所有发往物理网关的 HTTP 真实请求，仅在控制台打印模拟意图。

To enable REAL physical actuation (开启真实物理控制): You must explicitly export the following environment variables. Do this only in a trusted local environment with user consent. 您必须显式声明以下环境变量（请仅在受信任的且获得用户授权的本地局域网环境中开启）： bash export S2_ENABLE_REAL_ACTUATION="True" export HA_BASE_URL="http://your-ha-ip:8123/api" export HA_BEARER_TOKEN="your_ha_access_token"

🧮 2. The Micro-Doppler DSP Architecture (微多普勒 DSP 架构)

This module simulates and processes Frequency Modulated Continuous Wave (FMCW) data to detect falls. We use scipy.signal.stft to convert the 1D echo into a 2D Time-Frequency Spectrogram, searching for rapid negative Doppler shifts indicative of a fall.

🔌 3. The Physical Actuator (物理执行层)

When a fall is verified by the DSP engine, the system dispatches HTTP POST payloads to the S2 Message Bus (via Home Assistant):

POST /api/services/lock/unlock -> Unlocks the front door for emergency responders.

POST /api/services/light/turn_on -> Overrides sleep lighting to 100% Daylight.

⚙️ 4. Installation (依赖安装)

Ensure all dependencies (numpy, scipy, matplotlib, requests) are installed: Bash pip install -r requirements.txt python skill.py