Back to skill
Skillv1.0.4
VirusTotal security
SwitchBot OpenAPI · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 3:30 AM
- Hash
- 1f73e00d79addf174361c794249234918dc64ed66577c1901a0402ac0467d570
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: switchbot-cloudapi Version: 1.0.4 The skill provides a legitimate and well-documented interface for controlling SwitchBot devices via the official OpenAPI v1.1. It includes a Node.js CLI (scripts/switchbot_cli.js) and several helper shell scripts (e.g., list_devices.sh, send_command.sh) that correctly implement the required HMAC-SHA256 authentication and signature generation. The instructions in SKILL.md are security-conscious, explicitly advising the agent never to log tokens or secrets and to handle sensitive operations like unlocking with care.
- External report
- View on VirusTotal
