ThingsBot

Manage ThingsBoard devices, dashboards, telemetry, and users via the ThingsBoard REST API.

This skill is coherent for managing ThingsBoard via its REST API, but take these precautions before installing: - Do not provide production/admin credentials to the skill unless you trust the environment and the skill source; create a limited user with only the permissions needed (read/list vs. create/delete) where possible. - Replace the included sample credentials.json with your own config (the provided file contains example local credentials only). - Note the SKILL.md references a TB_REFRESH_TOKEN variable not declared in the requirements — expect to obtain/store refresh tokens at runtime if you need refresh functionality. - Understand that many example commands are destructive (DELETE, making dashboards public); verify commands before running and confirm TB_URL points to the intended server. - Because this is instruction-only (no installer), review the SKILL.md before use; it runs curl commands leveraging whatever credentials you provide. If you want stricter control, run the commands manually or provide a low-privilege account to the skill.

Type: OpenClaw Skill Name: thingsboard-skill Version: 0.1.0 The skill is designed to manage ThingsBoard resources via its REST API, using `curl` for API calls and `jq` for JSON parsing. All commands are directed at the configured ThingsBoard URL and use provided credentials/tokens, aligning perfectly with the stated purpose. The `credentials.json` file contains default ThingsBoard credentials for a local setup, which is common for examples and not indicative of malicious intent. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent beyond the skill's stated functionality.