可信 — 风险评分 5/100
上次扫描:1 天前 重新扫描
5 /100
home-assistant
Walks through connecting Home Assistant to an OpenClaw claw or any MCP-compatible client
Documentation-only skill that guides users through Home Assistant MCP integration setup with no executable code, scripts, or undeclared behavior.
技能名称home-assistant
分析耗时25.1s
引擎pi
可以安装
This skill is safe to use. No security concerns identified.
资源类型声明权限推断权限状态证据
文件系统 NONE NONE No file operations performed
网络访问 NONE NONE No network requests made; URLs are documentation examples for user action
命令执行 NONE NONE No shell commands executed
环境变量 NONE NONE No environment access
技能调用 NONE NONE No skill invocation
剪贴板 NONE NONE No clipboard access
浏览器 NONE NONE No browser automation
数据库 NONE NONE No database access
5 项发现
🔗
中危 外部 URL 外部 URL
https://selorahomes.com/docs/selora-ai/installation/
SKILL.md:31
🔗
中危 外部 URL 外部 URL
http://homeassistant.local:8123/api/
SKILL.md:36
🔗
中危 外部 URL 外部 URL
http://homeassistant.local:8123/api/selora_ai/mcp
SKILL.md:42
🔗
中危 外部 URL 外部 URL
https://selorahomes.com/docs/selorabox/
SKILL.md:68
🔗
中危 外部 URL 外部 URL
https://ha.example.com/api/selora_ai/mcp
SKILL.md:72

目录结构

1 文件 · 7.3 KB · 178 行
Markdown 1f · 178L
└─ 📝 SKILL.md Markdown 178L · 7.3 KB

安全亮点

✓ Documentation-only skill with no executable code
✓ Provides security guidance on token handling and storage best practices
✓ Warns against committing credentials to version control
✓ Recommends secrets managers for credential storage
✓ Clearly explains the purpose and scope of the skill
✓ No hidden functionality or obfuscated code
✓ No dependencies or external package dependencies