技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.2
统计：⭐ 1 · 189 · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：良性
Package：aiot-f2e-team/aqara-open-api
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：良性
OpenClaw 评估
The skill is internally consistent with its stated purpose (controlling Aqara devices via the Aqara Open Platform) and only needs the platform endpoint and token, but it has minor engineering inconsistencies you should review before installing.
目的
Name/description match the requested capabilities. The skill only needs an Aqara API URL and a bearer token to perform discovery, queries, control, and space management — which is appropriate. Minor mismatch: metadata and SKILL.md declare jq as a required binary, but the provided script and examples actually use python3 for JSON parsing; python3 is documented in README but not listed in the SKILL.md metadata 'bins' list. This is an engineering…
说明范围
Runtime instructions confine activity to: reading/writing a local cache file (data/devices.json), running the included fetch script, and making POST requests to AQARA_ENDPOINT_URL using curl. The SKILL.md explicitly forbids guessing IDs and requires using cached IDs. There are no instructions to read unrelated system files, other credentials, or to send data to endpoints outside the configured AQARA_ENDPOINT_URL.
安装机制
This is instruction-only with a small helper script (no install spec). No remote downloads or archive extraction are present. That keeps the on-disk footprint limited to the provided files. Low install risk.
证书
The skill requests only AQARA_ENDPOINT_URL and AQARA_OPEN_API_TOKEN, which are exactly the credentials needed to call the Aqara Open Platform API. That is proportionate. Note the documentation and script require python3, but python3 is not listed among required bins in SKILL.md metadata; conversely jq is listed but not used. This should be corrected to avoid runtime failures or misleading requirements.
持久
always:false and the skill does not request to modify other skills or system-wide settings. It writes a single cache file under its own data/ directory and otherwise performs network calls only to the configured AQARA_ENDPOINT_URL, which is appropriate for its role.
综合结论
This skill looks like a legitimate Aqara Open Platform client: it will send POST requests to the AQARA_ENDPOINT_URL using your AQARA_OPEN_API_TOKEN and will cache device data in data/devices.json. Before installing: (1) Confirm you trust the skill provider and that AQARA_ENDPOINT_URL points to the official Aqara API domain you expect. (2) Provide a token that has the minimal scope needed and be prepared to rotate it if you stop using the skill…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Aqara OpenAPI」。简介：Query and control Aqara/Lumi Studio smart home devices and manage spaces via th…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aiot-f2e-team/aqara-open-api/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。