Nest SDM

Control Nest thermostat, doorbell, and cameras via the Google Smart Device Management (SDM) API.

This skill appears to do what it says (control Nest and forward events), but the bundled scripts read and create token files and may pull credentials from places you might not expect (your ~/.zshenv and any local gcloud auth). Before installing or running: (1) Inspect the token files and avoid placing other secrets in ~/.openclaw/workspace or your shell rc; (2) Prefer creating dedicated OAuth credentials and a dedicated GCP project with least-privilege scopes; (3) Don't store long-lived unrelated secrets in .zshenv — the script will try to read it; (4) Consider running the scripts in an isolated environment (container or restricted user) and verify TELEGRAM_BOT_TOKEN/CHAT_ID are set explicitly rather than relying on automatic discovery; (5) If you don't want event forwarding, avoid running nest-events.sh or remove the Telegram forwarding sections. If you're unsure, test in a disposable account/project first.

Type: OpenClaw Skill Name: nest-sdm Version: 1.0.0 The skill is classified as suspicious due to several shell/JSON injection vulnerabilities found in `nest-events.sh` and `nest-sdm.sh`. User-controlled input (e.g., device names, thermostat settings, raw API body) is directly interpolated into `python3 -c` strings and `curl -d` JSON payloads without robust sanitization. This could allow an attacker to craft malicious input to perform unintended API actions or potentially execute arbitrary commands. For example, `nest-sdm.sh`'s `cmd_api` function directly passes user-supplied JSON to the API, and `nest-events.sh`'s `send_telegram_alert` and `format_event_alert` functions are vulnerable to Python string injection if input contains specific quote characters. While these are significant vulnerabilities, there is no clear evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints, persistence, or obfuscation; all network calls are to legitimate Google and Telegram APIs for the skill's stated purpose.