Tapo Camera

Connect to Tapo cameras, verify local access, capture snapshots, and inspect frames with local-first RTSP workflows and safe fallbacks.

This skill appears to do what it says (local discovery and one-frame RTSP captures), but consider these before installing: - Confirm install steps: make sure python-kasa (pip) / the kasa CLI will be installed or available, since the registry install spec only showed ffmpeg. The skill needs both python-kasa and the kasa CLI to function. - Avoid revealing credentials: the tool uses RTSP URLs that may embed usernames/passwords. Do not use --show-rtsp unless you understand the risk, and do not paste RTSP URLs or credentials into chat or shared logs. - Be aware of local exposure: passing the RTSP URL to ffmpeg as a command argument can expose credentials to other local users via process lists on some systems. If this is a concern, run captures on a single-user machine, or modify the capture logic to use a secured input method (e.g., ffmpeg reading from a file descriptor or authenticated local proxy). - Review the code (tapo-capture.py) yourself if possible and test on an isolated trusted network first. If you need automated installs, ensure the pip step for python-kasa is explicitly performed by your environment or installer. - If you want stricter guarantees, ask the skill to avoid writing any captures or memory files unless you explicitly approve each write.

Type: OpenClaw Skill Name: tapo-camera Version: 1.0.0 The Tapo Camera skill bundle is a well-structured tool for local camera management and snapshot capture. The included Python script (tapo-capture.py) uses the legitimate python-kasa library and ffmpeg to interact with devices on the local network, with explicit checks to prevent credential leakage in logs. The instructions (SKILL.md and supporting markdown files) consistently emphasize privacy, local-first workflows, and secure handling of environment-based secrets (TAPO_CAMERA_USERNAME/PASSWORD), showing no signs of malicious intent or prompt injection.