← 返回 Skills 市场
nickustinov

Itsyhome Control

作者 nickustinov · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
644
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install itsyhome-control
功能描述
Control and query HomeKit and Home Assistant smart home devices via the Itsyhome macOS app (https://itsyhome.app). Use when the user asks to turn devices on/...
使用说明 (SKILL.md)

Itsyhome Control

Itsyhome exposes a local HTTP webhook server (default port 8423) and a URL scheme (itsyhome://).

Prerequisites: Itsyhome Pro, webhook server enabled in Settings → Webhooks.

Core Pattern

All control and query happens via curl http://localhost:8423/\x3Caction>/\x3Ctarget>.

  • Targets use Room/Device format or just DeviceName
  • Spaces → %20 in URLs
  • On success: {"success": true} or JSON data
  • On failure: {"error": "..."} with HTTP 4xx

Workflow

  1. If target is ambiguouscurl http://localhost:8423/list/devices to find exact names
  2. To check current statecurl http://localhost:8423/info/\x3Ctarget>
  3. To control → appropriate action endpoint (see references/api.md)
  4. Confirm to user with what was done; include state if queried

Quick Reference

# Status
curl http://localhost:8423/status

# List
curl http://localhost:8423/list/rooms
curl http://localhost:8423/list/devices
curl http://localhost:8423/list/devices/Kitchen

# Query
curl http://localhost:8423/info/Office/Spotlights

# Control
curl http://localhost:8423/toggle/Office/Spotlights
curl http://localhost:8423/on/Kitchen/Light
curl http://localhost:8423/brightness/50/Bedroom/Lamp
curl http://localhost:8423/scene/Goodnight

For the full endpoint list, all control actions, and URL scheme reference: see references/api.md.

安全使用建议
This skill is coherent and only talks to a local Itsyhome service or triggers the itsyhome:// URL scheme. Before installing: (1) ensure Itsyhome Pro and its webhook server are running only on the trusted Mac and that you intentionally enabled Webhooks; (2) be aware the API exposes debug endpoints (raw HomeKit dumps and camera debug) that could reveal sensitive device or camera data — avoid invoking them unless needed; (3) no external credentials are requested, but the agent will issue HTTP requests to localhost, so only enable this skill for agents you trust. If you want extra safety, restrict the agent's network permissions to localhost and verify Itsyhome's webhook settings (disable debug endpoints or require app-level confirmation if possible).
功能分析
Type: OpenClaw Skill Name: itsyhome-control Version: 1.0.1 The skill is designed for local smart home control via the Itsyhome macOS app. The primary concern is the pattern described in SKILL.md and references/api.md, where the AI agent is instructed to construct `curl` commands using user-provided input for `<target>` (e.g., `curl http://localhost:8423/<action>/<target>`). This creates a significant shell injection vulnerability if the OpenClaw agent does not rigorously sanitize or quote user input before execution. Additionally, the `references/api.md` exposes `/debug` endpoints that can reveal sensitive local smart home data, posing an information disclosure risk. These are vulnerabilities, not direct malicious intent.
能力评估
Purpose & Capability
Name/description match the behavior in SKILL.md: all actions are implemented as HTTP calls to a local Itsyhome webhook (http://localhost:8423) or via the itsyhome:// URL scheme. The prerequisites (Itsyhome Pro with webhooks enabled on the same Mac) are consistent with the stated purpose and no unrelated permissions or env vars are requested.
Instruction Scope
Runtime instructions are limited to local HTTP requests (localhost) and the macOS URL scheme. That is expected for a local-homecontrol skill. However, the API reference exposes debug endpoints (e.g., /debug/raw, /debug/cameras) and a raw HomeKit dump which can surface sensitive device/camera data — the SKILL.md does not require calling these, but they are available and could be invoked, so consider whether use of debug endpoints is acceptable.
Install Mechanism
No install spec or code files — instruction-only. Nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths. Its only network interactions are to localhost (the Itsyhome webhook) or the local URL scheme, which is proportional to its function.
Persistence & Privilege
always:false and no special privileges requested. The skill can be invoked by the agent (normal platform behavior) but does not request permanent or system-wide changes.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install itsyhome-control
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /itsyhome-control 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Add HomeKit + Home Assistant mention and link to itsyhome.app
v1.0.0
Initial release – control Itsyhome smart home app via webhook API
元数据
Slug itsyhome-control
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Itsyhome Control 是什么?

Control and query HomeKit and Home Assistant smart home devices via the Itsyhome macOS app (https://itsyhome.app). Use when the user asks to turn devices on/... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 644 次。

如何安装 Itsyhome Control?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install itsyhome-control」即可一键安装,无需额外配置。

Itsyhome Control 是免费的吗?

是的,Itsyhome Control 完全免费(开源免费),可自由下载、安装和使用。

Itsyhome Control 支持哪些平台?

Itsyhome Control 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Itsyhome Control?

由 nickustinov(@nickustinov)开发并维护,当前版本 v1.0.1。

💬 留言讨论