by 安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill appears to do what it says (control Jellyfin and TVs) and asks for the expected credentials. However, it runs system commands (adb) via child_process.execSync and builds command strings from environment variables and CLI arguments (app IDs, ADB device strings). If you plan to use the direct ADB backend, be aware that malformed or malicious input could result in shell injection on the host. Recommendations before installing:
- Prefer the Home Assistant backend (HA_URL + HA_TOKEN) if y...详细分析 ▾
✓ 用途与能力
The declared env vars (JF_URL, JF_API_KEY, optional HA_*, TV_*, ADB_DEVICE) and the code (jellyfin.js + tv.js) align with the described features (search, resume, play, Home Assistant, WebOS, ADB). Required variables are relevant to the stated functionality.
ℹ 指令范围
SKILL.md instructions stay within the skill's domain: they instruct the agent to talk to Jellyfin, Home Assistant, TVs, or the adb binary and to store credentials in openclaw.json. They do not ask the agent to read unrelated system files. However, the runtime code issues system commands (adb via child_process.execSync) and constructs shell command strings from env/CLI inputs (app IDs, device strings), which grants the skill broad ability to execute local shell commands when using the ADB backend.
ℹ 安装机制
Registry lists no install spec, but the package contains package.json and README instructs running npm install and optional installation of adb/ws. There is no remote URL or extractor risk; dependencies are standard (axios, fuse.js, yargs). The missing platform-level install spec is an inconsistency (code exists but no formal install step declared).
ℹ 凭证需求
Requested env vars (Jellyfin, Home Assistant, TV settings, ADB) are appropriate for the described backends. Notes: JF_PASS or an admin API key can grant elevated access (listing users, activity log), and HA_TOKEN or TV_CLIENT_KEY give control over Home Assistant and/or the TV — treat these tokens as sensitive. The skill will fail or exit if JF_API_KEY is not present, which matches the functionality.
✓ 持久化与权限
always:false and normal model-invocation defaults are used. The skill does not request persistent platform-wide privileges or modify other skills. No 'always' or similar high-privilege flags are present.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.02026/2/12
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install jellyfin-control
镜像加速npx clawhub@latest install jellyfin-control --registry https://cn.longxiaskill.com