Nanoleaf (Picoleaf)

Control Nanoleaf light panels via the Picoleaf CLI. Use for turning Nanoleaf on/off, adjusting brightness, setting colors (RGB/HSL), changing color temperature, or any Nanoleaf lighting control.

This skill appears to do exactly what it says: run the Picoleaf CLI to control local Nanoleaf lights. Before installing, verify which install method you will use: the registry lists a Homebrew formula (low risk), while the SKILL.md includes a curl|tar command that downloads a GitHub release and extracts into ~/.local/bin. If you use the binary install, inspect the release archive (checksum/signature if available) and the files it will place in your PATH. The skill instructs creating ~/.picoleafrc containing your local access_token — treat that file as sensitive (set restrictive file permissions). Ensure you trust the picoleaf distribution source and are comfortable that the agent can execute picoleaf commands on your local network (it can turn lights on/off and change settings).

Type: OpenClaw Skill Name: nanoleaf Version: 1.0.0 The skill is classified as suspicious due to its use of high-risk capabilities, specifically downloading and executing a remote binary via `curl -sL ... | tar xz -C ~/.local/bin` for installation, as detailed in `SKILL.md`. While this action is plausibly needed for the stated purpose of installing the `picoleaf` CLI, it introduces a supply chain risk by fetching and executing code from an external URL (https://github.com/tessro/picoleaf/releases/). Additionally, the skill instructs the agent to perform network requests for API token generation and to write a configuration file containing this access token, which are sensitive operations, though necessary for its function.