← Back to Skills Marketplace
Ulanzi TC001
by
Felipe Ouro Preto
· GitHub ↗
· v1.0.3
724
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install ulanzi-tc001
Description
Control the Ulanzi TC001 (Pixel Clock) over local HTTP. Use to list tc1/tc001 commands, read status, enable/disable gadgets (time/date/youtube/matrix/etc.),...
Usage Guidance
This skill appears to do exactly what it says: control a TC001 pixel clock over local HTTP. Before installing, verify the device IP in config.json (or the TC001_HOST env) is correct and points to your device on the local network. Do not set TC001_HOST/ AWTRIX_HOST to unknown public hosts (the script will send HTTP GET/POST to whatever host you configure). If you plan to use a YouTube API key with the device, keep that key private (the skill does not request it but may read or set it in the device's app fields). If you want extra safety, inspect the full scripts/tc001.py file locally (it uses urllib only, no shell execution or remote code downloads).
Capability Analysis
Type: OpenClaw Skill
Name: ulanzi-tc001
Version: 1.0.3
The skill's primary purpose is to control a local Ulanzi TC001 device via HTTP, which is benign. However, the `scripts/tc001.py` file contains a critical vulnerability: it disables SSL certificate verification (`ssl._create_unverified_context()`) when making external API calls to `geocoding-api.open-meteo.com` and `api.open-meteo.com` in the `cmd_weather` function. This exposes the skill to Man-in-the-Middle attacks, allowing potential interception or alteration of weather data before it's sent to a local Awtrix device. No evidence of intentional malicious behavior like data exfiltration or persistence was found.
Capability Assessment
Purpose & Capability
The name/description (control TC001 over local HTTP) matches the included script and SKILL.md. The files only interact with local device endpoints and an optional local Awtrix instance (awtrix_host/awtrix_port in config). There are no unrelated credential or binary requirements.
Instruction Scope
SKILL.md tells the agent to read a local config.json or TC001_HOST env and to call the device's HTTP endpoints via the helper script. The runtime instructions and the script only reference the skill's config.json, local device endpoints (/ and /app_switch), and supported app fields. There is no instruction to read arbitrary user files or to transmit data to unexpected external endpoints.
Install Mechanism
There is no install specification — the skill is instruction/code-only and uses only the included Python helper (urllib). Nothing is downloaded or extracted from external URLs and no package installs are requested.
Credentials
The skill declares no required environment variables, but supports optional TC001_HOST, AWTRIX_HOST, and AWTRIX_PORT fallbacks. This is proportional to its purpose. Be aware that setting TC001_HOST to an arbitrary public host would cause the script to send GET/POSTs to that host (expected behavior but a configuration risk if mis-set). The skill does not request API keys or secrets itself.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It only reads its own config.json and runs a helper script; autonomous invocation is allowed by default (platform normal) but not exceptional here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ulanzi-tc001 - After installation, invoke the skill by name or use
/ulanzi-tc001 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
Update description to remove personal references; now fully generic.
v1.0.2
Initial public release of the Ulanzi TC001 control skill (local HTTP API tooling).
v1.0.1
Update description to remove Felipe-specific wording; now points to generic TC001 setups.
v1.0.0
Initial public release of the Ulanzi TC001 control skill (local HTTP API tooling).
Metadata
Frequently Asked Questions
What is Ulanzi TC001?
Control the Ulanzi TC001 (Pixel Clock) over local HTTP. Use to list tc1/tc001 commands, read status, enable/disable gadgets (time/date/youtube/matrix/etc.),... It is an AI Agent Skill for Claude Code / OpenClaw, with 724 downloads so far.
How do I install Ulanzi TC001?
Run "/install ulanzi-tc001" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ulanzi TC001 free?
Yes, Ulanzi TC001 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Ulanzi TC001 support?
Ulanzi TC001 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ulanzi TC001?
It is built and maintained by Felipe Ouro Preto (@felipeouropreto); the current version is v1.0.3.
More Skills