xiaodu-wake-up-routine-official

基于已安装的 xiaodu-control-official 编排儿童起床场景。当用户说“叫孩子起床”“开始早安模式”“帮我把孩子叫醒”，或要求让房间进入起床状态时使用。这个 skill 会复用 xiaodu-control-official 的现有脚本，对小度智能屏和小度 IoT 设备执行 scene-firs...

This skill is an orchestrator that expects an installed and trusted xiaodu-control-official dependency and will execute its scripts (list_scenes.sh, trigger_scene.sh, control_iot.sh, speak.sh, control_xiaodu.sh, etc.). Before installing: (1) confirm you have xiaodu-control-official from a trusted source and inspect its scripts for any unexpected network calls or sensitive-data handling; (2) confirm you are okay with the agent running those bash scripts from the workspace; (3) be aware the skill will write small preference files (XIAODU_CONTEXT.md, MEMORY.md) in the workspace—check their location and contents to avoid persisting secrets; (4) if you cannot inspect the dependent skill, consider sandboxing or restricting this skill’s filesystem/exec permissions. Overall the skill is internally coherent for its stated purpose, but its safety depends on the trustworthiness of the external scripts it calls.

Type: OpenClaw Skill Name: xiaodu-wake-up-routine-official Version: 1.0.0 The skill orchestrates smart home 'wake-up' routines by instructing the AI agent to execute bash scripts from a sibling directory (`../xiaodu-control-official/scripts/`). While the stated intent is benign, the instructions in `SKILL.md` and `references/usage-notes.md` direct the agent to construct shell commands using potentially unsanitized user input (e.g., for the `speak.sh` and `control_xiaodu.sh` scripts), which presents a shell injection vulnerability. Additionally, the skill performs persistent state changes by writing to `XIAODU_CONTEXT.md` and `MEMORY.md` based on user interactions.