S2 Light Perception
v1.0.2S2-SP-OS Light Radar. Real LAN UDP discovery and local API calls (Hue/Wiz) to create a 4sqm voxel light memzero. / S2-SP-OS 光之雷达。真实的局域网UDP发现与本地API调用，逆向推算4平米光...
⭐ 0· 88·0 current·0 all-time
byMilesXiang@spacesq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe active LAN discovery and local Hue/Wiz calls; the skill only requires python3 and performs UDP/SSDP and HTTP calls to discovered devices — this matches the stated purpose. Small mismatch: the CLI and README mention 'mqtt' as a protocol, but the code implements only 'hue' and 'wiz' handlers.
Instruction Scope
SKILL.md explicitly instructs the agent to perform active network scans (UDP broadcast to port 38899 and SSDP multicast to 239.255.255.250:1900) and to make local HTTP/UDP calls — this is expected given the purpose but is network-active behavior that will generate traffic on the LAN. The skill enforces a '--consent-granted true' gate for read operations; discovery does not require consent. No instructions attempt to read unrelated local files or exfiltrate data to external endpoints.
Install Mechanism
No install spec; instruction-only with an included Python script. No downloads or archive extraction; low install risk. Execution uses only the standard library (socket, urllib).
Credentials
The skill requests no environment variables or credentials. It does include a hardcoded placeholder Hue username path ('s2-agent-user') noted in comments as a stub — this is not a secret but may cause authentication failures when querying Hue bridges. No unrelated credentials or config paths are requested.
Persistence & Privilege
The skill is not marked 'always' and does not persist or modify other skills or system settings. It performs actions only when executed and does not request elevated or persistent privileges.
Assessment
This skill actively scans your local network and sends UDP broadcasts/SSDP multicasts to discover Hue/Wiz devices and then makes local HTTP/UDP calls to query state. That behavior is expected for its purpose but can be noisy and may violate some network policies. Before installing or running: (1) only run it on trusted/private networks or with permission from your network administrator; (2) review the included light.py yourself — it is the only code that will run and there are no hidden downloads; (3) note that 'mqtt' is advertised but not implemented in the code, and the Hue username is a placeholder (queries to Hue bridges may fail without a real user token); (4) consider whether active device discovery is acceptable for your environment. If you need the agent to avoid any network activity, do not install or run this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk972y571953netstf8p914h3jh83d7e6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💡 Clawdis
Binspython3