← Back to Skills Marketplace
nickustinov

Itsyhome Control

by nickustinov · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
644
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install itsyhome-control
Description
Control and query HomeKit and Home Assistant smart home devices via the Itsyhome macOS app (https://itsyhome.app). Use when the user asks to turn devices on/...
README (SKILL.md)

Itsyhome Control

Itsyhome exposes a local HTTP webhook server (default port 8423) and a URL scheme (itsyhome://).

Prerequisites: Itsyhome Pro, webhook server enabled in Settings → Webhooks.

Core Pattern

All control and query happens via curl http://localhost:8423/\x3Caction>/\x3Ctarget>.

  • Targets use Room/Device format or just DeviceName
  • Spaces → %20 in URLs
  • On success: {"success": true} or JSON data
  • On failure: {"error": "..."} with HTTP 4xx

Workflow

  1. If target is ambiguouscurl http://localhost:8423/list/devices to find exact names
  2. To check current statecurl http://localhost:8423/info/\x3Ctarget>
  3. To control → appropriate action endpoint (see references/api.md)
  4. Confirm to user with what was done; include state if queried

Quick Reference

# Status
curl http://localhost:8423/status

# List
curl http://localhost:8423/list/rooms
curl http://localhost:8423/list/devices
curl http://localhost:8423/list/devices/Kitchen

# Query
curl http://localhost:8423/info/Office/Spotlights

# Control
curl http://localhost:8423/toggle/Office/Spotlights
curl http://localhost:8423/on/Kitchen/Light
curl http://localhost:8423/brightness/50/Bedroom/Lamp
curl http://localhost:8423/scene/Goodnight

For the full endpoint list, all control actions, and URL scheme reference: see references/api.md.

Usage Guidance
This skill is coherent and only talks to a local Itsyhome service or triggers the itsyhome:// URL scheme. Before installing: (1) ensure Itsyhome Pro and its webhook server are running only on the trusted Mac and that you intentionally enabled Webhooks; (2) be aware the API exposes debug endpoints (raw HomeKit dumps and camera debug) that could reveal sensitive device or camera data — avoid invoking them unless needed; (3) no external credentials are requested, but the agent will issue HTTP requests to localhost, so only enable this skill for agents you trust. If you want extra safety, restrict the agent's network permissions to localhost and verify Itsyhome's webhook settings (disable debug endpoints or require app-level confirmation if possible).
Capability Analysis
Type: OpenClaw Skill Name: itsyhome-control Version: 1.0.1 The skill is designed for local smart home control via the Itsyhome macOS app. The primary concern is the pattern described in SKILL.md and references/api.md, where the AI agent is instructed to construct `curl` commands using user-provided input for `<target>` (e.g., `curl http://localhost:8423/<action>/<target>`). This creates a significant shell injection vulnerability if the OpenClaw agent does not rigorously sanitize or quote user input before execution. Additionally, the `references/api.md` exposes `/debug` endpoints that can reveal sensitive local smart home data, posing an information disclosure risk. These are vulnerabilities, not direct malicious intent.
Capability Assessment
Purpose & Capability
Name/description match the behavior in SKILL.md: all actions are implemented as HTTP calls to a local Itsyhome webhook (http://localhost:8423) or via the itsyhome:// URL scheme. The prerequisites (Itsyhome Pro with webhooks enabled on the same Mac) are consistent with the stated purpose and no unrelated permissions or env vars are requested.
Instruction Scope
Runtime instructions are limited to local HTTP requests (localhost) and the macOS URL scheme. That is expected for a local-homecontrol skill. However, the API reference exposes debug endpoints (e.g., /debug/raw, /debug/cameras) and a raw HomeKit dump which can surface sensitive device/camera data — the SKILL.md does not require calling these, but they are available and could be invoked, so consider whether use of debug endpoints is acceptable.
Install Mechanism
No install spec or code files — instruction-only. Nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths. Its only network interactions are to localhost (the Itsyhome webhook) or the local URL scheme, which is proportional to its function.
Persistence & Privilege
always:false and no special privileges requested. The skill can be invoked by the agent (normal platform behavior) but does not request permanent or system-wide changes.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install itsyhome-control
  3. After installation, invoke the skill by name or use /itsyhome-control
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Add HomeKit + Home Assistant mention and link to itsyhome.app
v1.0.0
Initial release – control Itsyhome smart home app via webhook API
Metadata
Slug itsyhome-control
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Itsyhome Control?

Control and query HomeKit and Home Assistant smart home devices via the Itsyhome macOS app (https://itsyhome.app). Use when the user asks to turn devices on/... It is an AI Agent Skill for Claude Code / OpenClaw, with 644 downloads so far.

How do I install Itsyhome Control?

Run "/install itsyhome-control" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Itsyhome Control free?

Yes, Itsyhome Control is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Itsyhome Control support?

Itsyhome Control is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Itsyhome Control?

It is built and maintained by nickustinov (@nickustinov); the current version is v1.0.1.

💬 Comments