RDA MSG Board

Send scrolling text messages to RDA MSG Board via HTTP/JSON. Use for notifications, alerts, or status updates on physical LED matrix.

This skill appears to do what it claims: it runs local Python scripts to POST JSON to the IP you provide (or to a saved profile). Before installing: (1) verify you trust the skill source or inspect the included scripts (they are small and readable); (2) prefer using a local boards.yaml profile rather than exporting credentials into shared environment variables; (3) ensure MSG_BOARD_IP points to your trusted local device (don't direct it at unknown third-party hosts, since credentials are sent via Basic Auth); (4) if you will use the manager script, install PyYAML from a trusted source; and (5) avoid running untrusted code on sensitive hosts. Because the skill's provenance/homepage is not provided, treat the package like any third-party script and review it before use.

Type: OpenClaw Skill Name: rda-msg-board Version: 1.0.2 The OpenClaw AgentSkills bundle 'rda-msg-board' is classified as benign. The `SKILL.md` clearly defines the purpose of sending messages to an LED board and explicitly includes a 'CRITICAL SECURITY INSTRUCTION' warning the AI agent against command injection, providing safe `argv` list invocation examples. The Python scripts (`manage_boards.py`, `send_message.py`) use `yaml.safe_load()` for secure YAML parsing, handle credentials via environment variables or a local `boards.yaml` file for the stated purpose of authenticating to the message board, and make standard HTTP requests using `urllib.request`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or any attempt to subvert the agent's behavior beyond its intended function.