小米/米家智能家居控制

小米/米家智能家居设备控制。通过 MCP Server 工具控制家中的小米设备，包括灯、空气净化器、电暖气、空调、风扇、扫地机器人、窗帘等。当用户提到任何关于智能家居控制的指令时触发，如"把灯关掉"、"开空调"、"净化器调到睡眠模式"、"客厅太暗了"、"家里空气不好"等。即使用户没有明确说"小米"或"米家"，只要...

This skill appears to do what it says (control Xiaomi/Mijia devices) but it asks the agent to collect your Xiaomi username/password and verification codes at runtime and to read camera snapshots for analysis. Before installing or using it: 1) Confirm how the platform and MCP Server will store and protect your credentials (prefer token-based/OAuth flows or dedicated, limited-access accounts rather than your main account password). 2) Avoid pasting passwords into plain chat unless you trust the agent's secure input and storage mechanisms. 3) Ask the skill author or operator how camera images are handled, whether images leave your network, and how long they're retained. 4) Consider creating a dedicated Xiaomi account with limited devices for third-party integrations. If you cannot verify secure credential handling and image privacy, treat this skill as privacy-sensitive and proceed cautiously.

Type: OpenClaw Skill Name: mijia-home Version: 1.1.0 The skill instructs the AI agent to explicitly request the user's Xiaomi account username and password in plaintext to perform authentication via the 'xiaomi_setup' tool. This is a high-risk credential harvesting pattern, as sensitive credentials should typically be handled via secure authentication flows rather than being processed through an LLM prompt. Additionally, the skill includes camera snapshot and RTSP management capabilities (SKILL.md), which pose a privacy risk if the underlying MCP server is not trusted.