Shelly BluTRV Manager

• Verdict: Advisory
• Analyzed: Mar 29, 2026, 9:06 PM
• Findings: 0
• Version: 1.0.0
• Hash: a61fe93a133311512c2d5fc0dea70be75e9339c626d8f8f19a472cc1902bd62b
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: shelly-blutrv-manager Version: 1.0.0 The Shelly BluTRV Manager skill is a well-documented tool for controlling smart home thermostats and sensors via local RPC and Shelly Cloud API. The scripts (e.g., blutrv-control.sh, blutrv-status.sh) follow standard practices for shell-based automation, including timeout handling, response verification, and the use of a dedicated, restricted environment file (~/.openclaw/skills/.shelly-blutrv-manager.env) for sensitive credentials. No evidence of data exfiltration, malicious prompt injection, or intentional backdoors was found; the code logic is strictly aligned with the stated purpose of climate control management.