ble-device-control
v1.0.4Control BLE devices via airctl CLI. MUST invoke when user mentions Bluetooth, BLE, device scan, connect, read, write, or notify. ALWAYS read this skill BEFOR...
⭐ 0· 89·0 current·0 all-time
byskinapi@skinapi2025
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an instruction-only wrapper around the airctl CLI for BLE operations. It does not request unrelated credentials, config paths, or binaries. Asking the user to have airctl installed is appropriate for the described functionality.
Instruction Scope
SKILL.md narrowly instructs the agent to validate user inputs, run airctl commands (scan, connect, read, write, subscribe, disconnect), and parse JSON output. It does not instruct reading unrelated host files or exfiltrating data. Input validation rules are explicit and limit shell-injection risks.
Install Mechanism
There is no automated install spec in the registry (instruction-only), but SKILL.md directs the user to a pip install of a GitHub repo (git+https://github.com/skinapi2025/AirCtl.git). Installing directly from a GitHub repo is a common but higher-risk pattern than installing a vetted package from an official index — the skill correctly tells the agent to ask the user before installing.
Credentials
The skill requests no environment variables or credentials. That is proportionate for a local CLI-based BLE control skill.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent presence or modify other skills or system configurations. Autonomous invocation is allowed (platform default) but not combined with other privilege escalations here.
Assessment
This skill appears to do what it says: it issues airctl commands to your local Bluetooth adapter. Before using it, (1) confirm you are comfortable granting the agent the ability to run airctl CLI commands on your machine (those commands access local BLE hardware and devices), (2) verify the referenced GitHub repository (https://github.com/skinapi2025/AirCtl) yourself before running pip install from it — preferably install in a virtualenv or container and inspect the code/release — and (3) ensure your system-level Bluetooth permissions and any device pairing consent are acceptable. The skill's input validation reduces injection risk, but always review any generated shell commands before executing them.Like a lobster shell, security has layers — review code before you run it.
latestvk9787t9dpqd41dr1gkt13rwcdd84w2d7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.