tescmd

Installation and setup guide for Tesla vehicle control and telemetry via the tescmd node.

This skill appears to be a legitimate setup guide for the tescmd node, but before installing: 1) Be aware you will need to run interactive flows that create OAuth tokens and EC keys and host a public key (GitHub Pages or Tailscale) — these involve your GitHub and Tesla accounts. 2) The registry metadata did not declare the required tools (git, gh, python, optionally tailscale); treat that as a transparency gap. 3) 'pip install tescmd' and any 'curl | sh' installer fetch and run code from the network — review the tescmd and installer sources (GitHub repo and PyPI package) to ensure they are trustworthy. 4) Consider performing the setup on an isolated machine or VM, inspect ~/.config/tescmd/bridge.json after setup, and avoid sharing tokens. If you want me to, I can: (a) fetch and summarize the tescmd GitHub repo contents for suspicious patterns, (b) list exactly which files/paths the setup writes, or (c) walk you step-by-step through doing this in an isolated environment.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill bundle is classified as suspicious primarily due to the use of `curl -fsSL https://tailscale.com/install.sh | sh` in SKILL.md for installing Tailscale. While `tailscale.com` is a legitimate domain, this command executes arbitrary remote code directly, which is a high-risk practice and a common vector for supply chain attacks if the remote script or domain were compromised. Additionally, the skill involves extensive system-level operations (e.g., `sudo` commands for package installation) and establishes network connections for vehicle control, which are inherently high-risk capabilities, even if intended for the stated purpose.