Security checks across malware telemetry and agentic risk
This skill is meant to automate Tesla charging, but it needs review because it controls a real vehicle account on a recurring schedule and contains a shell-based charge-start path that contradicts its own safety claims.
Review carefully before installing. Only use it if you are comfortable giving an automation access to your Tesla account behavior, and avoid enabling cron until you have verified the schedule file, credential handling, timezone assumptions, and how to disable the jobs. Do not use --auto-start unless the shell=True charge-start path is fixed or otherwise contained.
def start_charging(self):
"""Trigger charging on the vehicle"""
try:
subprocess.run(
f'TESLA_EMAIL="{self.tesla_email}" python3 {self.tesla_skill_dir}/scripts/tesla.py charge start',
shell=True,
check=True,## Quick Setup Create a cron job that runs at midnight and checks if a charge is scheduled: ```bash clawdbot cron add \
65/65 vendors flagged this skill as clean.