Is antgly/control-ikea-lightbulb safe?
Yes. antgly/control-ikea-lightbulb is safe to install. Oathe's behavioral security audit gave the control-ikea-lightbulb skill by antgly a trust score of 93/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/antgly/control-ikea-lightbulb
Is antgly/control-ikea-lightbulb safe to install?
This skill provides legitimate functionality for controlling TP-Link Kasa smart bulbs on the local network using the python-kasa library. The code is clean and focused on its stated purpose without malicious functionality.
What security issues were found in antgly/control-ikea-lightbulb?
Category Scores
Findings (3)
MEDIUM Sensitive file access detected during installation -20 ▶
Monitoring detected access to sensitive files including .env, SSH keys, AWS credentials, and other configuration files during the installation process. However, analysis indicates this was likely from SSH authentication processes rather than the skill itself.
LOW Contains executable scripts -5 ▶
The skill includes Python scripts and shell wrappers that execute code for smart bulb control functionality. This is expected behavior for the skill's purpose.
LOW Potential network reconnaissance capability -5 ▶
While designed for legitimate bulb control, the skill could theoretically be used to probe network devices by trying different IP addresses, though such activity would be detectable.
Should I install antgly/control-ikea-lightbulb?
Oathe's verdict for antgly/control-ikea-lightbulb is SAFE with a trust score of 93/100. Recommendation: Install.