by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: it discovers Daikin devices on your local network (UDP broadcast), stores device entries (including optional API keys/passwords) in a local JSON file, and uses the daikin-ts library to control units. Before installing: 1) consider that the skill needs network access (it will broadcast on your LAN to find devices) and filesystem access (it writes data/devices.json). 2) Understand that any API keys or passwords you enter are stored in plaintext under the skil...详细分析 ▾
✓ 用途与能力
Name/description, required permissions (network, fs), and code (discovery, device management, control) align: the skill discovers devices via UDP, stores device config locally, and uses daikin-ts to talk to devices. No unrelated credentials, binaries, or external services are requested.
ℹ 指令范围
SKILL.md and code stay within the domain of local device management and control. The skill asks users to provide device IPs and (for some adapters) API keys or passwords. It also instructs physically opening a unit to find a printed API key (documented). Note: the skill stores API keys/passwords in a local JSON file (data/devices.json) — this is functional but means secrets are stored in plaintext on disk.
✓ 安装机制
No install spec is included (instruction-only install), and the code lists a single npm dependency (daikin-ts). Nothing is downloaded from arbitrary URLs or executed from unknown hosts.
ℹ 凭证需求
The skill requests no environment variables or external credentials. It does persist device API keys/passwords to a local file under the skill's data directory, which is expected for this functionality but may be sensitive; users should be aware those secrets live in plaintext unless they change file protections.
✓ 持久化与权限
always is false and the skill persists only its own configuration to data/devices.json. It requests normal network and filesystem permissions appropriate to discovery and local config storage and does not attempt to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/16
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install daikin-aircon
镜像加速npx clawhub@latest install daikin-aircon --registry https://cn.longxiaskill.com