reCameraV2

reCamera (RV1126B) device full-stack Web API reference covering authentication, device management, video/audio/image configuration, recording rules & storage...

This skill is a coherent API reference and appears to be what it claims, but review these precautions before installing: - Network scanning: The playbooks explicitly instruct subnet scans (ARP/ping/nmap). Only run these on networks and devices you own or have explicit permission to scan — scanning other networks can be intrusive or illegal. - Token persistence: The skill directs capturing the JWT token from Set-Cookie and persisting it in the agent session. Understand that the agent will hold that token in memory/context until cleared; if you share agent logs or contexts it could expose device session credentials. - Destructive operations: Endpoints include reboot, factory-reset, firmware-upgrade and config upload. Ensure playbooks require explicit user confirmation before executing these actions to avoid accidental downtime or data loss. - Firmware URLs: The device firmware upgrade flow can fetch a release URL you provide. Never point devices to untrusted or attacker-controlled firmware URLs; this can brick or compromise the device. - Source provenance: The skill has no homepage and an unknown source. While content appears internally consistent, prefer skills from known/trusted authors or verify the skill content against vendor documentation if you require high assurance. If you plan to use this skill in production or on third-party networks, require explicit explicit user consent for any scanning/auth actions and consider limiting the agent's ability to persist or export captured tokens. If you want higher confidence, provide the original vendor docs or the skill author's provenance for verification.

Type: OpenClaw Skill Name: recamera Version: 1.0.0 The skill bundle provides instructions for high-risk behaviors including automated subnet scanning for device discovery (Playbook A in SKILL.md) and direct access to a system terminal via WebSockets (/ws/system/terminal in API_REFERENCE.md). While these capabilities are plausibly aligned with the stated purpose of debugging and managing reCamera hardware, they grant the AI agent significant network and shell access. The bundle also details sensitive operations such as firmware upgrades and credential persistence, which lack sufficient safeguards against misuse if the agent is prompted with malicious intent.