Back to skill
Skillv1.0.4

VirusTotal security

SwitchBot OpenAPI · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 3:30 AM
Hash
1f73e00d79addf174361c794249234918dc64ed66577c1901a0402ac0467d570
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: switchbot-cloudapi Version: 1.0.4 The skill provides a legitimate and well-documented interface for controlling SwitchBot devices via the official OpenAPI v1.1. It includes a Node.js CLI (scripts/switchbot_cli.js) and several helper shell scripts (e.g., list_devices.sh, send_command.sh) that correctly implement the required HMAC-SHA256 authentication and signature generation. The instructions in SKILL.md are security-conscious, explicitly advising the agent never to log tokens or secrets and to handle sensitive operations like unlocking with care.
External report
View on VirusTotal