← Back to Skills Marketplace
ch2925

cmaiot-basic-general-kit

by ch2925 · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
134
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install cmaiot
Description
查询并控制cmaiot平台上的产品和设备,并可获取视频设备的播放地址。cmaiot平台的正式名称是中国移动AIoT平台(iot.10086.cn)。连接需要的产品API Key和产品ID由cmaiot工具保存。目前只支持使用物模型的设备。
README (SKILL.md)

Commands

Add Token

scripts/cmaiot.js add productId/accessKey

Query or set data

以下命令中的部分参数使用/分隔,每个参数均为必传

# 列出已添加的产品
# 如果没有已添加的产品,需要询问用户产品ID和访问密钥
scripts/cmaiot.js ls

# 查询物模型 identifier为标识符
# services 为平台可以远程调用的服务
# events 为设备可能会主动触发的事件
# properties 为设备属性,可主动上报也可下发命令
scripts/cmaiot.js model productId

# 查询设备列表
scripts/cmaiot.js ls productId

# 读取设备缓存的最新属性
scripts/cmaiot.js ls productId/deviceName

# 读取设备实时属性
# propertyId 需要通过查询物模型获取
scripts/cmaiot.js ls productId/deviceName/propertyId

# 查询设备详情
# 可以查询视频设备的Sn
scripts/cmaiot.js detail productId/deviceName

# 获取视频设备的直播地址
# 注意有3个参数,用/分隔
scripts/cmaiot.js live productId/deviceName/deviceSn

# 调用设备服务
# serviceId和identifier 需要通过查询物模型获取
scripts/cmaiot.js call productId/deviceName/serviceId '{"identifier":"value"}'

# 设置设备属性
# identifier 需要通过查询物模型获取
scripts/cmaiot.js set productId/deviceName '{"identifier":"string"}'
scripts/cmaiot.js set productId/deviceName '{"intValue": 20}'

# 设备启/停, LwM2M设备需要IMEI
scripts/cmaiot.js enable productId/deviceName
scripts/cmaiot.js disable productId/deviceName/imeiValue

Notes

每次用户询问cmaiot设备状态时,都需要调用SKILL目录下的scripts/cmaiot.js工具进行查询,不能使用缓存的结果

Exception

读取实时属性、设置属性和调用服务是同步接口,需要设备在线。但启用/停用设备不需要设备在线。 对离线或不存在的设备,应该跳过操作。设备控制超时,则认为操作失败。

Output Format

涉及cmaiot的回答要严格按照以下格式输出

中国移动AIoT平台
🔍 正在解析指令...
✅ 识别设备:设备A、设备B、设备C
🎯 目标状态:停用

📡 获取设备状态...
• 设备A:在线 ✓
• 设备B:在线 ✓
• 设备C:离线 ✗

⚙️ 执行XX操作...
• 设备A:XX成功 ✓
• 设备B:XX成功 ✓
• 设备C:跳过(离线状态)⏭️

📊 执行结果统计:
━━━━━━━━━━━━━━━━━━
✅ 成功:2个设备
⏭️ 跳过:1个设备(设备C-离线)
❌ 失败:0个设备
━━━━━━━━━━━━━━━━━━
Usage Guidance
This skill appears to do what it says: call the China Mobile AIoT API using per-product access keys stored by the script. Before installing, consider: (1) the accessKey values are saved unencrypted in scripts/config.json — if you install this, treat those keys as sensitive and rotate them if the file is exposed; (2) the script logs full request/response JSON to the console which may leak sensitive data in agent logs — review or remove logging if required; (3) verify the API host (iot-api.heclouds.com vs iot.10086.cn) with the platform documentation or the skill author to ensure requests go to the expected endpoint; (4) the bundled Node script has some robustness bugs (missing checks for absent products, minor variable/name issues) — test with non-critical data first; (5) ensure the agent runtime provides a compatible fetch implementation for Node. If you cannot verify the endpoint or do not trust storing keys unencrypted, do not install or run this skill.
Capability Analysis
Type: OpenClaw Skill Name: cmaiot Version: 1.0.3 The skill is a legitimate integration for the China Mobile AIoT (OneNET) platform, allowing an agent to query and control IoT devices. The Node.js script `scripts/cmaiot.js` implements standard HMAC-SHA256 authentication and communicates exclusively with the official API endpoint (iot-api.heclouds.com). While it stores API keys in a local `config.json` file, this behavior is consistent with its stated purpose, and there are no signs of data exfiltration, malicious execution, or harmful prompt injection in `SKILL.md`.
Capability Tags
cryptorequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description (manage/query devices on China Mobile AIoT) match the provided SKILL.md and the bundled scripts/cmaiot.js which call IoT API endpoints, implement device queries, control, and live-stream URL retrieval. The tool saves per-product access keys locally as described.
Instruction Scope
SKILL.md instructs the agent to always call the included scripts/cmaiot.js for any cmaiot action and to prompt the user for productId/accessKey when needed. The instructions do not direct the agent to read unrelated files or environment variables, nor to send data to endpoints other than the API used by the script.
Install Mechanism
No install spec or external downloads are used; the skill is instruction + a bundled Node script. The script only uses built-in Node modules (crypto, fs, path) and relies on a global fetch. No archive downloads or third-party package installs are performed.
Credentials
The skill requests no environment credentials, which is proportionate. Caveats: it stores product access keys in plaintext config.json inside the skill's scripts directory and logs full request/response JSON to console (could expose sensitive values in logs). The API base URL in the code (iot-api.heclouds.com) differs from the human-readable domain in the description (iot.10086.cn) — this could be legitimate (internal API host) but is worth verifying.
Persistence & Privilege
always:false and the skill does not request elevated agent-wide privileges. It writes a config.json in its own directory to persist product credentials, which is normal for this type of helper. It does not modify other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install cmaiot
  3. After installation, invoke the skill by name or use /cmaiot
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
cmaiot 1.0.3 - 优化描述,明确平台全称及网址(中国移动AIoT平台(iot.10086.cn))。 - 新增命令,支持读取设备实时属性:scripts/cmaiot.js ls productId/deviceName/propertyId。 - 明确实时属性、设置属性、调用服务为同步接口,需设备在线。
v1.0.2
No changes detected in this version. - Version 1.0.2 released with no file changes or updates to commands, documentation, or features.
v1.0.1
cmaiot v1.0.1 - 精简了描述内容,移除对“原OneNET和OneLink平台合并”的说明,提升表述简洁性。 - 保持所有命令和使用说明不变,未新增或删除命令。 - 其余内容和输出格式要求保持一致。
v1.0.0
cmaiot 1.0.0 - 初始发布,支持在中国移动AIoT平台上查询与控制产品和设备,包括获取视频设备直播地址。 - 提供添加API Key和产品ID、设备/属性/服务查询与设置、设备启停等命令行接口。 - 仅支持物模型设备,所有查询均调用实时数据,不使用缓存。
Metadata
Slug cmaiot
Version 1.0.3
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is cmaiot-basic-general-kit?

查询并控制cmaiot平台上的产品和设备,并可获取视频设备的播放地址。cmaiot平台的正式名称是中国移动AIoT平台(iot.10086.cn)。连接需要的产品API Key和产品ID由cmaiot工具保存。目前只支持使用物模型的设备。 It is an AI Agent Skill for Claude Code / OpenClaw, with 134 downloads so far.

How do I install cmaiot-basic-general-kit?

Run "/install cmaiot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is cmaiot-basic-general-kit free?

Yes, cmaiot-basic-general-kit is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does cmaiot-basic-general-kit support?

cmaiot-basic-general-kit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created cmaiot-basic-general-kit?

It is built and maintained by ch2925 (@ch2925); the current version is v1.0.3.

💬 Comments