Description

Control ONVIF Profile S/T IP cameras for PTZ, presets, discovery, and RTSP snapshot/recording with auto-discovery and multi-camera support.

README (SKILL.md)

IP Camera Skill

Name: Ipcam
Author: ltpop

Control IP cameras via RTSP (snapshots, recording) and ONVIF (PTZ, presets, discovery).

Tested with TP-Link Tapo/Vigi. Works with Hikvision, Dahua, Reolink, Amcrest, Axis, and other ONVIF Profile S/T cameras.

Setup

bash skills/ipcam/install.sh

Then either discover cameras automatically or configure manually:

# Auto-discover and add
ptz.py discover --add

# Or edit config
nano ~/.config/ipcam/config.json

Config Format

{
  "default": "front-door",
  "cameras": {
    "front-door": {
      "ip": "192.168.1.100",
      "username": "admin",
      "password": "secret",
      "rtsp_port": 554,
      "onvif_port": 2020,
      "rtsp_main_path": "stream1",
      "rtsp_sub_path": "stream2"
    }
  }
}

onvif_port: 2020 (TP-Link), 80 (Hikvision/Dahua), 8000, 8080
rtsp_main_path / rtsp_sub_path: auto-detect with ptz.py stream-uri --save
Env overrides: CAM_IP, CAM_USER, CAM_PASS, CAM_RTSP_PORT, CAM_ONVIF_PORT

Usage

RTSP (`camera.sh`)

camera.sh snapshot                         # capture frame
camera.sh --cam cam2 snapshot /tmp/cam.jpg # specific camera
camera.sh record 15                        # record 15s clip
camera.sh stream-url sub                   # print sub-stream URL
camera.sh info                             # test connectivity
camera.sh list-cameras                     # list configured cameras

PTZ (`ptz.py`)

ptz.py status                     # current position
ptz.py move left                  # pan left (speed 0.5, 0.5s)
ptz.py move zoomin 0.8 1.0        # zoom in, speed 0.8, 1s
ptz.py goto 0.5 -0.2 0.0          # absolute pan/tilt/zoom
ptz.py home                       # home position
ptz.py stop                       # stop movement
ptz.py preset list                # list presets
ptz.py preset goto 1              # go to preset 1
ptz.py preset set 2 "Door"        # save current pos as preset

Discovery & Stream URI

ptz.py discover                   # scan network for ONVIF cameras
ptz.py discover --add             # scan and add to config
ptz.py stream-uri                 # query RTSP paths from ONVIF
ptz.py stream-uri --save          # save paths to config

Multi-camera: use --cam \x3Cname> with any command.

Directions

left, right, up, down, zoomin, zoomout, upleft, upright, downleft, downright

Troubleshooting

RTSP fails: Check IP/port/firewall. Use ptz.py stream-uri to verify paths. Camera may limit concurrent RTSP connections (try closing other viewers).
ONVIF fails: Verify ONVIF port and that ONVIF is enabled in camera web UI. Try common ports: 2020, 80, 8000, 8080.
No cameras found: Ensure same subnet, ONVIF enabled, UDP multicast not blocked.
PTZ not working: Not all cameras support PTZ. Check ONVIF Profile S support.
Auth error: Check username/password. Special characters are URL-encoded automatically.

Usage Guidance

This skill appears to be what it claims: ONVIF discovery, PTZ control and RTSP snapshot/recording. Before installing, consider the following: - Credentials: The installer creates ~/.config/ipcam/config.json which contains camera usernames/passwords in plaintext by default. Prefer environment variables (CAM_USER/CAM_PASS) or tighten permissions on the config file (chmod 600) and use a dedicated low-privilege camera account where possible. - Package installs: install.sh creates a local Python venv and runs 'pip install onvif-zeep' and may call apt-get or brew to install ffmpeg. These pull packages from standard registries (PyPI/apt/homebrew). If you require strict provenance, inspect the onvif-zeep package and its dependencies before allowing network installs. - Network behavior: Discovery uses WS-Discovery multicast (239.255.255.250) to scan your LAN and then connects to discovered camera IPs over ONVIF/RTSP. This is expected and limited to your local network; it does not contact external cloud endpoints in the provided code. - Permissions: install.sh may call sudo apt-get on Linux; be aware of privilege escalation during installation. Review the script before running it on a machine you don't control. - Origin: The registry metadata lists no homepage and the source is unknown. While the code is coherent and readable, if you require higher trust, request or inspect a published upstream repo or a maintainer identity. If those tradeoffs are acceptable (local network scanning, storing credentials locally unless you use env overrides, and allowing pip/apt/brew installs), the skill is consistent with its purpose.

Capability Analysis

Type: OpenClaw Skill Name: ipcam Version: 1.0.0 The skill is classified as suspicious due to two primary security risks, though without clear malicious intent. First, the `install.sh` script uses `sudo apt-get install -y ffmpeg`, which requires elevated privileges and represents a privilege escalation vulnerability if the agent executes it without explicit user consent. Second, both `camera.sh` and `ptz.py` read and utilize camera `username` and `password` stored in plaintext within `~/.config/ipcam/config.json`. While this is necessary for the skill's functionality and not an act of exfiltration, storing credentials in plaintext locally is a significant security vulnerability, making them susceptible to compromise if the local system is breached. The `SKILL.md` and other documentation do not contain prompt injection attempts or instructions for malicious behavior, and the shell scripts use proper quoting to mitigate direct shell injection risks.

Capability Assessment

✓ Purpose & Capability

Name/description (ONVIF PTZ + RTSP) match the provided scripts and SKILL.md. Required binaries (ffmpeg, python3, jq) and the python dependency onvif-zeep are appropriate for RTSP capture, ONVIF control and JSON parsing. No unrelated credentials, binaries, or config paths are requested.

✓ Instruction Scope

SKILL.md and the scripts instruct the agent to run the installer, run discovery, query RTSP/ONVIF endpoints, and read/write the local config (~/.config/ipcam/config.json). The runtime actions (multicast WS-Discovery, ONVIF connections, ffmpeg RTSP probes) are within the stated scope and do not attempt to read unrelated system files or send data to third-party endpoints.

ℹ Install Mechanism

Installer is a local shell script that creates a venv and runs 'pip install onvif-zeep', and may call brew or apt-get to install ffmpeg. This uses PyPI and package managers (expected for the functionality) and does not download arbitrary archives from unknown servers. The venv is placed in the skill directory and executables are made executable. Network access is used to fetch packages from standard registries (pip/apt/brew).

ℹ Credentials

The skill reads camera-related env vars (CAM_IP, CAM_USER, CAM_PASS, CAM_RTSP_PORT, CAM_ONVIF_PORT, IPCAM_CONFIG) which are proportionate to its purpose. However, camera credentials are stored in a local config file (~/.config/ipcam/config.json) in plaintext by default; users should be aware of this sensitive storage and restrict filesystem permissions or prefer env overrides.

✓ Persistence & Privilege

always:false and disable-model-invocation:false (normal). The skill does not request permanent platform-wide privileges or modify other skills. Installer writes a config template and makes included scripts executable—expected behavior for a local CLI skill.

Version History

v1.0.0

Initial release: ONVIF PTZ control, RTSP capture, camera discovery, multi-camera support

Metadata

Slug ipcam

Version 1.0.0

License —

All-time Installs 4

Active Installs 4

Total Versions 1

Frequently Asked Questions

What is Ipcam?

Control ONVIF Profile S/T IP cameras for PTZ, presets, discovery, and RTSP snapshot/recording with auto-discovery and multi-camera support. It is an AI Agent Skill for Claude Code / OpenClaw, with 834 downloads so far.

How do I install Ipcam?

Run "/install ipcam" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Ipcam free?

Yes, Ipcam is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Ipcam support?

Ipcam is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Ipcam?

It is built and maintained by ltpop (@ltpop); the current version is v1.0.0.

More Skills

Ipcam