天津安信华瑞科技有限公司-可燃气体报警器主机-配套技能

This skill should be used when the user wants to generate, customize, or deploy QuecPython code for reading gas detector data from an Anxin Huarui AX100 seri...

This package is generally coherent with its described purpose, but pay attention before deploying: 1) Change URL_CLIENT to your customer's HTTP endpoint — do not rely on the template default (iot.tranthing.com) unless you intentionally want that vendor to receive your data. 2) If you don't want remote firmware updates, set URL_OTA to an empty string; otherwise verify and trust the OTA server (the default points to a tcloudbase.com domain). 3) The template will include device identifiers (IMEI/IMSI/CCID) and cellular info in reports — confirm that sending these to the configured endpoint is allowed by your data/privacy policy. 4) Review build_payload() and main.py to ensure the JSON format and fields match customer requirements and that no extra endpoints are contacted. 5) Test on an isolated device/network before production to confirm behavior (report frequency, OTA behavior, and that logs/prints do not leak secrets).

Type: OpenClaw Skill Name: tianjin-anxinhuarui-gas-monitoring-iot-skill Version: 1.0.1 The skill provides a functional IoT template for QuecPython modules that includes high-risk capabilities such as the collection and transmission of sensitive cellular identifiers (IMEI, IMSI, and CCID) to hardcoded remote endpoints (URL_CLIENT and URL_OTA in config.py). It also implements an Over-The-Air (OTA) update mechanism in main.py that downloads and executes remote payloads based on server responses without visible integrity or authenticity checks (e.g., digital signatures). While these features are aligned with the stated purpose of industrial gas monitoring, the combination of sensitive data exfiltration and unauthenticated remote code execution capabilities constitutes a significant security risk.