by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and conservative, but it requires the hosting platform to provide access to your Home Assistant instance. Before installing or enabling it: (1) verify the hosting agent/connector is trusted and inspect its connector implementation if possible; (2) do not paste long-lived tokens into chat—use the platform's secret storage or short-lived, least-privilege tokens (read-only tokens for audits); (3) require explicit confirmation for any write actions and prefer two-step con...详细分析 ▾
✓ 用途与能力
Name/description (HAOS operations, audits, diagnostics, automation design) match the SKILL.md and reference docs. The skill requests no unrelated binaries, env vars, or configs; it explicitly expects platform-provided runtime access (connector/browser relay/token), which is appropriate for this purpose.
✓ 指令范围
Runtime instructions stay on-purpose: emphasize read-only diagnostics, evidence collection (states/history/logs/traces) and only perform writes after explicit multi-step confirmation. The SKILL.md lists allowed vs blocked actions and tiered risk controls; reading potentially sensitive logs is expected for diagnostics and is explicitly constrained by the policy.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is downloaded or written to disk by the skill itself, minimizing installation risk.
✓ 凭证需求
Skill declares no required environment variables or credentials. It documents acceptable runtime access methods and credential handling policies (avoid pasting long-lived secrets, use secret storage), which is proportional to its needs. The platform/host will supply any needed tokens; users should ensure least-privilege tokens are used.
✓ 持久化与权限
always:false (default) and no persistent install behavior. disable-model-invocation is false (agent may invoke autonomously) — this is the platform default and not combined with other red flags in this skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install home-assistant-master
镜像加速npx clawhub@latest install home-assistant-master --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Home Assistant Master — 智能管家总控 安装说明： 安装命令：npx clawhub@latest install home-assistant-master 支持国内镜像加速，使用 --registry https://cn.longxiaskill.com 参数可加速下载 该技能用于支付宝相关操作，可能需要相应的平台账号或API密钥