📍 Location Awareness — 位置感知
v1.2.0通过隐私友好的 GPS 追踪（Home Assistant、OwnTracks、GPS Logger）实现位置感知，可设置基于位置的提醒，查询移动历史、行程时间及附近兴趣点。
5· 2.2k·3 当前·3 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
medium confidenceThe skill's files, instructions, and required tools are consistent with a local location-tracking utility; it asks for location provider tokens/URLs which are expected but not declared in registry metadata, and it handles sensitive location data so review configuration before use.
评估建议
This skill appears to be what it says: a local location-aware helper that talks to Home Assistant, OwnTracks, a generic HTTP endpoint, or a local GPSLogger file. Before installing or enabling it:
- Review scripts/config.json and scripts/location.py to confirm provider URLs and tokens are correct and point to your own services. Don't use tokens from other services.
- Understand it will handle highly sensitive location data and may send requests to whichever provider URL you configure (e.g., Home ...详细分析 ▾
ℹ 用途与能力
Name/description (privacy-friendly GPS tracking, Home Assistant/OwnTracks/GPSLogger support) match the included code: providers for Home Assistant, OwnTracks, generic HTTP and a file-based GPSLogger are implemented. The only required binary is python3 which is appropriate. Minor inconsistency: the registry metadata lists no required environment variables, yet the skill explicitly supports/reads many provider-related env vars (HA_TOKEN, HA_URL, OWNTRACKS_TOKEN, LOCATION_HTTP_URL, GPSLOGGER_FILE, LOCATION_PROVIDER), which are necessary for operation when used with remote services.
ℹ 指令范围
SKILL.md confines runtime actions to running scripts/location.sh which execs location.py and documents the exact commands the agent should run. The runtime instructions and code reference config.json, geofences.json and optionally env vars or ~/.openclaw/.env. The agent is instructed to run the local script and return its output; the instructions do not ask the agent to read arbitrary unrelated files or network endpoints beyond the configured providers. Important: the wrapper will source ~/.openclaw/.env if present, exposing any credentials stored there to the skill.
✓ 安装机制
No install spec; the skill is delivered as files and requires an existing python3 on PATH. No downloads or archive extraction are performed by the skill itself, which is low-risk from an install perspective.
ℹ 凭证需求
The skill legitimately needs provider credentials/URLs to access Home Assistant, OwnTracks, or an HTTP endpoint. However, the registry metadata declares no required env vars or primary credential while SKILL.md and the code clearly support many sensitive env vars (HA_TOKEN, HA_URL, OWNTRACKS_TOKEN, LOCATION_HTTP_URL, GPSLOGGER_FILE, etc.). This mismatch is a transparency/metadata issue: users should expect to supply secrets if they want full functionality. The skill does not request unrelated credentials (e.g. AWS keys) and reads only provider-configured endpoints and files.
✓ 持久化与权限
always:false (no forced inclusion) and the skill does not request elevated privileges. It stores its geofence/reminder/state files in its script directory (geofences.json, .location_state.json), which is normal for a local skill. It does source ~/.openclaw/.env (via the provided wrapper) which is documented — this gives the skill access to any credentials the user places there, so users should ensure that file only contains intended variables.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/2/3
Security: removed arbitrary shell execution (cmd:), file reads (file:, pass:) and subprocess import from secret resolver. Secrets now support only env vars and plain strings. Removed standalone cron script. Added env var configuration for all providers (HA_*, OWNTRACKS_*, LOCATION_HTTP_URL, GPSLOGGER_FILE). Env vars take precedence over config.json. Replaced systemd timer docs with OpenClaw built-in cron.
● 无害
安装命令
点击复制官方npx clawhub@latest install location-awareness
镜像加速npx clawhub@latest install location-awareness --registry https://cn.longxiaskill.com