基于已安装的 xiaodu-control-official 编排老人夜间短时起身的安全辅助场景。当用户说“夜里起夜”“我要去卫生间”“帮我开一下夜灯”“夜间辅助模式”这类请求时使用。这个 skill 会复用 xiaodu-control-official 的现有脚本，对小度智能屏和小度 IoT 设备执行 sce...
Security Analysis
high confidenceThe skill's declared purpose (orchestrating low‑impact night lighting using an existing xiaodu-control-official skill) matches its instructions and minimal local script; nothing requests unrelated credentials or installs arbitrary code.
The skill's name/description match the runtime instructions: it explicitly reuses scripts from xiaodu-control-official (list_scenes.sh, trigger_scene.sh, list_iot_devices.sh, control_iot.sh, list_devices.sh, speak.sh) and adds a small tail script for timed auto-off. No extraneous credentials, binaries, or unrelated capabilities are requested.
SKILL.md restricts actions to device/scene listing, triggering, short speech, and timed auto‑off, and enforces serial execution and minimal confirmations. It also instructs persisting user preferences into XIAODU_CONTEXT.md and MEMORY.md (local files). Persisting preferences is coherent with the stated purpose but is a behavior the user should be aware of since it writes local state.
This is an instruction‑only skill with no install spec; only a small, readable shell script (night_light_tail.sh) is included. No downloads, package installs, or archive extraction are used.
The skill declares no required env vars, credentials, or config paths. Instructions reference other skill scripts (expected) and local preference files; there is no request for unrelated secrets or external endpoints.
always:false (normal). The skill may autonomously run when invoked and will persist short/long term preferences to local files (XIAODU_CONTEXT.md, MEMORY.md) as part of its workflow. This is reasonable for personalization, but users should know these files will be created/updated.
Guidance
This skill appears coherent and limited in scope, but review a few practical points before installing: 1) Ensure you already have a trusted xiaodu-control-official skill and that its helper scripts (control_iot.sh, list_* etc.) are present and trustworthy — this skill relies on them. 2) Be aware it may write preference files (XIAODU_CONTEXT.md, MEMORY.md) in the skill workspace to persist user choices; confirm you’re comfortable with local persistence. 3) The included night_light_tail.sh is small and readable (it sleeps then calls control_iot.sh to turn lights off), but verify control_iot.sh’s behavior if you need stronger guarantees. 4) Autonomous invocation is allowed by default (not flagged here) — if you want to limit when the skill runs, restrict invocation policies on your agent. If you want extra assurance, inspect the xiaodu-control-official scripts the skill calls before enabling.
Latest Release
v1.0.0
Initial release
Popular Skills
Published by @dueros-mcp on ClawHub
