← 返回 Skills 市场

Homeassistant N8n Agent

Name: Homeassistant N8n Agent
Author: enchantedmotorcycle

作者 enchantedmotorcycle · GitHub ↗ · v1.0.4

cross-platform ⚠ suspicious

2786

总下载

当前安装

版本数

在 OpenClaw 中安装

/install homeassistant-n8n-agent

功能描述

Bridge OpenClaw with your n8n instance for Home Assistant automation.

使用说明 (SKILL.md)

Home‑Assistant – n8n Agent Skill

This skill bridges OpenClaw with your n8n instance for Home Assistant automation.

How it works

Uses curl to trigger a n8n workflow for all things related to IoT. All requests should be a POST formatted as follows: curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "USERS QUESTION/REQUEST", "requestType": "DETERMINED REQUEST TYPE", "sessionId":"openclaw"}'

Steps

Determine the nature of a user's prompt.

Is the inquiry about a current device state or multiple states? If so, requestType is state
Is the inquiry asking for an IoT device state to be changed? If so, requestType is action
Is the inquiry asking about IoT data from the past? If so, requestType is historical
Is the inquiry asking about calendar or schedule information? If so, requestType is calendar

Quick Reference

Action

curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "turn off the office light", "requestType": "action", "sessionId":"openclaw"}'

curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "change the downstairs thermostat to 72", "requestType": "action", "sessionId":"openclaw"}'

Historical

curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when was the front door last opened?", "requestType": "historical", "sessionId":"openclaw"}'

State

curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "is the air conditioner running?", "requestType": "state, "sessionId":"openclaw"}'

Calendar

curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when is my next meeting?", "requestType": "calendar, "sessionId":"openclaw"}'

安全使用建议

This skill is coherent with its stated purpose, but review these before installing: - Ensure you have an n8n webhook matching the hard-coded URL (http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73) or update the skill to point to your webhook. The SKILL.md provides no mechanism to configure the webhook URL. - The examples contain JSON syntax errors — the agent should construct valid JSON when calling the webhook. - The skill will forward user-provided chat text to the n8n webhook. Make sure the n8n instance is trusted and not exposed publicly if you care about privacy; consider adding authentication on the webhook. - Test with non-sensitive inputs first to confirm the workflow behavior in n8n and that the webhook triggers the intended Home Assistant automations. - Prefer a version of the skill that accepts a configurable webhook URL (via an environment variable or skill setting) and documents authentication if you plan to expose n8n beyond localhost.

功能分析

Type: OpenClaw Skill Name: homeassistant-n8n-agent Version: 1.0.4 The SKILL.md instructs the OpenClaw agent to construct a `curl` command where user input (`USERS QUESTION/REQUEST`) is directly embedded into the JSON payload. This creates a severe prompt injection vulnerability, potentially leading to shell injection or JSON injection if the agent does not properly sanitize or escape the user's input before executing the `curl` command. While the intended target is `localhost:5678` (a local n8n instance), this vulnerability could allow an attacker to execute arbitrary commands on the local system where the agent is running, making it a significant security risk.

能力评估

✓ Purpose & Capability

Name and description (bridge OpenClaw to n8n for Home Assistant) align with the instructions: it only requires curl and explains how to POST JSON to an n8n webhook on localhost. Nothing requested appears unrelated to the stated purpose.

ℹ Instruction Scope

SKILL.md instructs the agent to POST user chat text and a requestType to a localhost n8n webhook — this is within scope. Notes: examples include a hard-coded webhook UUID and fixed sessionId, and several example JSON snippets have syntax errors (missing quotes around some values). The instructions do not mention authentication, verification of the webhook URL, or how to configure a different host, so the agent will rely on a specific local endpoint being present.

✓ Install Mechanism

There is no install specification and no code files — lowest-risk pattern. The skill relies on the curl binary which is declared in metadata and matches the usage in SKILL.md.

✓ Credentials

The skill declares no environment variables or credentials and the runtime instructions do not reference any secrets. That is proportionate for a skill that simply posts to a local webhook.

✓ Persistence & Privilege

The skill is instruction-only and does not request persistent presence or elevated privileges. always is false and autonomous invocation is allowed by default (normal for skills); there is no indication it modifies other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install homeassistant-n8n-agent
安装完成后，直接呼叫该 Skill 的名称或使用 /homeassistant-n8n-agent 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.4

- Added support for calendar-related inquiries with a new requestType: "calendar". - Updated instructions and examples to include handling for calendar and schedule information. - Clarified the process for determining the nature of user prompts.

v1.0.3

- Switched underlying integration method from mcporter to curl for triggering n8n workflows. - Updated documentation to provide curl-based POST examples for automation requests. - Revised metadata to require the curl binary instead of mcporter. - Clarified and updated request formatting, including sessionId support in payloads. - Provided new usage examples for action, state, and historical queries using curl.

v1.0.2

- Added frontmatter with name, description, homepage, and metadata to SKILL.md for enhanced documentation and integration. - Improved formatting and clarity in instructions and code samples. - Fixed typos and standardized code references for consistency.

v1.0.1

- Expanded SKILL.md with detailed instructions for determining request types (state, action, historical) from user prompts. - Added step-by-step guidance and quick command reference for each request type. - Removed obsolete commands.yaml file.

v1.0.0

- Initial release connecting OpenClaw with n8n for Home Assistant automation. - Utilizes the built-in mcporter skill to trigger the `n8n_dispatch` service.

元数据

Slug homeassistant-n8n-agent

版本 1.0.4

许可证 —

累计安装 7

当前安装数 7

历史版本数 5

常见问题