Is joeynyc/govee-lights safe?
Yes. joeynyc/govee-lights is safe to install. Oathe's behavioral security audit gave the govee-lights skill by joeynyc a trust score of 92/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/joeynyc/govee-lights
Is joeynyc/govee-lights safe to install?
This skill provides legitimate integration with Govee smart lights through their official API. The code is clean and well-documented with no malicious functionality detected. The skill operates exactly as advertised - controlling smart lights through standard API calls.
What security issues were found in joeynyc/govee-lights?
Category Scores
Findings (4)
MEDIUM API Key Environment Variable Access -10 ▶
The skill requires access to GOVEE_API_KEY environment variable to function, which represents credential access.
LOW External API Communication -15 ▶
The skill makes HTTP requests to external Govee API endpoints, which is expected but represents external communication.
LOW Third-party Integration Requirements -5 ▶
Skill requires setup with external service credentials and network access to function properly.
INFO Smart Home Device Control -15 ▶
The skill controls physical smart home devices which could have security implications if misused, but this is within the stated scope.
Should I install joeynyc/govee-lights?
Oathe's verdict for joeynyc/govee-lights is SAFE with a trust score of 92/100. Recommendation: Install.