Is jesserod329/philips-hue-thinking safe?
Yes. jesserod329/philips-hue-thinking is safe to install. Oathe's behavioral security audit gave the philips-hue-thinking skill by jesserod329 a trust score of 92/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/jesserod329/philips-hue-thinking
Is jesserod329/philips-hue-thinking safe to install?
This skill provides legitimate functionality for using Philips Hue lights as visual indicators of AI activity status. The code appears benign and purpose-appropriate, with only minor concerns around executable scripts and hardcoded configuration.
What security issues were found in jesserod329/philips-hue-thinking?
Category Scores
Findings (4)
LOW Executable shell scripts included -10 ▶
The skill includes shell scripts (quick-setup.sh, hue-hooks.sh) that contain executable code for Hue light control integration
LOW Hardcoded IP address in setup script -5 ▶
The quick-setup.sh contains a hardcoded IP address (192.168.1.151) that may not work for all users
INFO Agent command execution requests -5 ▶
Skill documentation instructs the agent to execute 'hue' commands for light control
INFO Canary file access during monitoring -10 ▶
Monitoring detected access to canary files, but this appears to be the monitoring system itself rather than malicious skill behavior
Should I install jesserod329/philips-hue-thinking?
Oathe's verdict for jesserod329/philips-hue-thinking is SAFE with a trust score of 92/100. Recommendation: Install.