94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill's code, runtime instructions, and requested environment variables are consistent with a Home Assistant energy load‑shifting tool and do not ask for unrelated credentials or install arbitrary...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771813400387,
        "_id": "k97e2h66qfdxabk0pk2cjpj5sd81qrmw",
        "changelog": "v1.0.3\n\nSecurity\n\nAdded domain allowlist to call-service command in ha_bridge.py. Only energy-related HA service domains are permitted: switch, automation, script, climate, water_heater, input_boolean, input_number, number. Unauthorized domains are rejected with exit code 2.\nAdded comprehensive Security section to SKILL.md documenting required credentials, least-privilege token recommendations, and the domain allowlist.\nFixed\n\nReplaced em dashes with hyphens across all files (ha_bridge.py, SKILL.md, README.md).\nRemoved degree symbols from HVAC section in SKILL.md.\nAdded missing docstring to main() in ha_bridge.py.\nUpdated call-service description from \"Call any HA service\" to \"Call an energy-related HA service (restricted to allowed domains)\".\nFixed SKILL.md metadata parsing by migrating environment variables to the official ClawHub requires: env: schema.\nRemoved\n\nRemoved .env.example file and custom .env loading function from ha_bridge.py per ClawHub validation. The skill now strictly relies on system environment variables (os.environ).",
        "changelogSource": "user",
        "createdAt": 1771813400387,
        "parsed": {
            "clawdis": {
                "emoji": "⚡",
                "requires": {
                    "env": [
                        "HA_URL",
                        "HA_TOKEN"
                    ]
                }
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Omer Bese",
        "handle": "mrbese",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/100455309?v=4",
        "kind": "user",
        "linkedUserId": "kn78ndd6nvz9bc9vg95rtdnb41801a6e"
    },
    "ownerHandle": "mrbese",
    "skill": {
        "_creationTime": 1771810039608,
        "_id": "kd7c0ezfdz1n31s348mh0j4xcs81p4dp",
        "badges": [],
        "createdAt": 1771810039608,
        "displayName": "Grid-Aware Energy Load Shifter",
        "latestVersionId": "k97e2h66qfdxabk0pk2cjpj5sd81qrmw",
        "ownerUserId": "kn78ndd6nvz9bc9vg95rtdnb41801a6e",
        "slug": "grid-aware-energy-load-shifter",
        "stats": {
            "comments": 0,
            "downloads": 371,
            "installsAllTime": 1,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "Grid-aware energy load shifter for Home Assistant. Reads real-time electricity prices (TOU, time-of-use, dynamic pricing), solar production forecasts, batter...",
        "tags": {
            "latest": "k97e2h66qfdxabk0pk2cjpj5sd81qrmw",
            "latest energy home-assistant": "k978ys603jv6xpgzbrhf0zjhy581pvtx",
            "latest energy home_asistant HA": "k979zg18pt5tnmakcvv26ybyg981qres"
        },
        "updatedAt": 1772049335874
    }
}