← Back to Skills Marketplace
nj070574-gif

Home Assistant Integration

by Only 1 Naren · GitHub ↗ · v2.1.0 · MIT-0
cross-platform ✓ Security Clean
175
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install home-assistant-skill
Description
Control and query Home Assistant via natural language. Covers lights, switches, climate, temperature sensors, cameras, automations, energy monitoring, EV cha...
README (SKILL.md)

Home Assistant Integration v2.1 — OpenClaw Skill

Control and query your Home Assistant smart home in plain English through Telegram or any OpenClaw channel.

Setup

1. Create a Home Assistant Long-Lived Token

In Home Assistant: Profile (bottom-left) → SecurityLong-Lived Access TokensCreate Token

Copy the token immediately — it is only shown once.

2. Add credentials to openclaw.json

json { "env": { "HOME_ASSISTANT_URL": "http://homeassistant.local:8123", "HOME_ASSISTANT_TOKEN": "your-long-lived-token-here" } }

Using HTTPS with a self-signed certificate? Also add:

json "HOME_ASSISTANT_SSL_VERIFY": "false"

3. Restart OpenClaw

\bash sudo systemctl restart openclaw

4. Test

Send your bot: home summary

Security Notes

  • Connects only to your configured HOME_ASSISTANT_URL — no third-party calls
  • Create a dedicated HA user with only the permissions your agent needs
  • Store credentials in openclaw.json with restricted permissions (chmod 600)
  • Prefer HOME_ASSISTANT_CA_CERT over HOME_ASSISTANT_SSL_VERIFY=false for HTTPS

What You Can Ask

Phrase What happens
home summary Temperatures, lights on, heating status, active switches
what is the temperature? All temperature sensors
urn off the living room lights Calls light.turn_off
set the heating to 21 degrees Calls climate.set_temperature
is the EV charger on? Reads switch state
show me the front door camera Returns snapshot URL
list all automations Shows enabled/disabled automations
is anyone home? Reads presence/person entity states
what is my energy consumption? All power/energy sensors
urn on lights at 80% brightness Service call with brightness attribute

Available Operations

The skill provides 15 Python snippets executed via the OpenClaw exec tool:

  • _load_config — loads credentials from environment (always runs first)
  • check_api — tests HA connectivity
  • ha_summary_for_telegram — full home summary
  • get_temperature_sensors — all temperature sensors
  • get_lights — lights with brightness levels
  • get_switches — all switches with state
  • get_climate — thermostat/climate status
  • call_service — control any HA device/service
  • search_entities — find entities by keyword
  • get_cameras — camera list with snapshot URLs
  • camera_snapshot — download camera image
  • get_automations — all automations with last-triggered
  • rigger_automation — fire a specific automation
  • get_energy — energy and power sensors
  • send_notification — send via HA notify service

Skill File

The full skill implementation is in home_assistant.json in this directory. It contains all 15 snippets as Python code that the agent executes via the Home Assistant REST API (/api/states, /api/services/*).

Troubleshooting

HOME_ASSISTANT_TOKEN not configured Check the HOME_ASSISTANT_TOKEN in your openclaw.json env block and restart OpenClaw.

401 Unauthorized Token expired. Regenerate: HA → Profile → Security → Long-Lived Access Tokens.

SSL certificate verify failed Add "HOME_ASSISTANT_SSL_VERIFY": "false" to your openclaw.json env block.

Connection refused Check HOME_ASSISTANT_URL is correct and HA is running.

Usage Guidance
This skill is broadly coherent with its stated purpose, but review these points before installing: 1) Create a dedicated Home Assistant long-lived token with minimal permissions — do not use an admin token if not needed. 2) The skill will read ~/.openclaw/openclaw.json to find credentials if not set in the process env, so verify that file contains only the intended HA credentials and set strict permissions (chmod 600). 3) Camera snapshots and full entity state will be fetched and printed — consider privacy implications for sending camera or lock/presence info into chat channels. 4) Prefer using HOME_ASSISTANT_CA_CERT over disabling SSL verification (HOME_ASSISTANT_SSL_VERIFY=false) to avoid MitM risk. 5) The provided snippets include some sloppy/incomplete code (e.g., Path is referenced without import and a snippet was truncated) — inspect the full home_assistant.json before enabling the skill to ensure there are no additional unexpected behaviors or hidden endpoints. If you want higher assurance, request the complete, untruncated skill source and verify there are no network calls to hosts other than your HA instance.
Capability Analysis
Type: OpenClaw Skill Name: home-assistant-skill Version: 2.1.0 The Home Assistant skill bundle provides a legitimate integration for controlling smart home devices via the Home Assistant REST API. The Python snippets in `home_assistant.json` perform standard API calls (GET/POST) to a user-configured URL using a long-lived access token. Credential handling is performed by reading environment variables or the local `openclaw.json` configuration file as described in the documentation. While there is a minor coding error in `_load_config` (missing `pathlib` import for the `Path` object), there is no evidence of malicious intent, data exfiltration to third parties, or prompt injection attacks.
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The name/description match the actual behavior: the snippets call Home Assistant REST endpoints (/api/states, /api/services/*, camera_proxy) and require HOME_ASSISTANT_URL and HOME_ASSISTANT_TOKEN. The requested Python deps (requests, urllib3) are appropriate for this task.
Instruction Scope
Runtime instructions and snippets operate on the Home Assistant API and produce summaries/snapshots for use in chats. They read credentials from environment or openclaw.json, call HA endpoints, and write camera snapshots to /tmp. This scope is expected for a Home Assistant integration, but it will expose full HA state (all entities) to whichever channel the agent posts into — be mindful of privacy for cameras, presence, door/lock states, etc.
Install Mechanism
Instruction-only skill with no install spec and no external downloads, which is low risk. The skill relies on existing Python and the requests/urllib3 packages (declared).
Credentials
The only required secrets are HOME_ASSISTANT_URL and HOME_ASSISTANT_TOKEN, which are proportional. The snippets also read ~/.openclaw/openclaw.json (and reference a possible ~/.openclaw/workspace/.secrets path in an error message) to obtain credentials if not present in the environment; this is consistent with the documented setup but means the skill will read a file in your home directory. Ensure that file contains only the intended HA credentials and has restrictive permissions (chmod 600).
Persistence & Privilege
Skill is not marked always:true and does not request elevated system-wide privileges. It does instruct a user to restart OpenClaw (systemctl) during setup, which requires sudo but is a normal operational step for adding a skill.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install home-assistant-skill
  3. After installation, invoke the skill by name or use /home-assistant-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.1.0
v2.1.0: Security scanner remediation. Added SKILL.md with full metadata (required HOME_ASSISTANT_URL + HOME_ASSISTANT_TOKEN declared, python packages declared, security disclosure). Removed .secrets file fallback. Removed external script references from README. Added Security Notes. No API changes.
v2.0.0
Initial release: control lights, climate, cameras, energy, automations and get home summaries via Telegram. 15 snippets, 90 triggers, full HTTPS/SSL support, zero credentials in skill files.
Metadata
Slug home-assistant-skill
Version 2.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Home Assistant Integration?

Control and query Home Assistant via natural language. Covers lights, switches, climate, temperature sensors, cameras, automations, energy monitoring, EV cha... It is an AI Agent Skill for Claude Code / OpenClaw, with 175 downloads so far.

How do I install Home Assistant Integration?

Run "/install home-assistant-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Home Assistant Integration free?

Yes, Home Assistant Integration is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Home Assistant Integration support?

Home Assistant Integration is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Home Assistant Integration?

It is built and maintained by Only 1 Naren (@nj070574-gif); the current version is v2.1.0.

💬 Comments