Is imaloney/roku-control safe?
Yes. imaloney/roku-control is safe to install. Oathe's behavioral security audit gave the roku-control skill by imaloney a trust score of 98/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/imaloney/roku-control
Is imaloney/roku-control safe to install?
This Roku control skill appears to be a legitimate implementation of the Roku External Control Protocol (ECP) for local network device control. The code is clean, well-documented, and follows expected patterns for Roku integration with no signs of malicious behavior or data exfiltration.
What security issues were found in imaloney/roku-control?
Category Scores
Findings (2)
LOW Contains executable Python script -5 ▶
The skill includes a Python script (roku_control.py) that will be executed when the skill is used. While the code appears legitimate and implements standard Roku ECP protocol interactions, any executable code carries inherent risk.
LOW Network device control capabilities -10 ▶
The skill can discover and control any Roku device on the local network without authentication, as designed by the ECP protocol. While this is intended functionality, it could potentially be misused to control devices the user doesn't own if they're on the same network.
Should I install imaloney/roku-control?
Oathe's verdict for imaloney/roku-control is SAFE with a trust score of 98/100. Recommendation: Install.