Is dbeadle1/vector-control safe?
Yes. dbeadle1/vector-control is safe to install. Oathe's behavioral security audit gave the vector-control skill by dbeadle1 a trust score of 91/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/dbeadle1/vector-control
Is dbeadle1/vector-control safe to install?
This skill provides legitimate Vector robot control functionality through Wirepod's HTTP API with minimal security risks. The main concerns are the configurable base URL parameter and the inherent risks of physical robot control, but no malicious behavior was detected.
What security issues were found in dbeadle1/vector-control?
Category Scores
Findings (3)
LOW Configurable Base URL Parameter -15 ▶
The --base parameter allows changing the target server from localhost to any URL, potentially redirecting robot commands to unintended endpoints.
LOW External Program Execution -10 ▶
The script executes ffmpeg via subprocess for audio conversion, which involves code execution but appears legitimate for the stated audio processing functionality.
MEDIUM Physical Robot Control Capabilities -20 ▶
The skill controls a physical Vector robot including movement, camera, microphone, and speech capabilities, which could potentially be misused for surveillance or unwanted physical actions, though this appears to be the intended functionality.
Should I install dbeadle1/vector-control?
Oathe's verdict for dbeadle1/vector-control is SAFE with a trust score of 91/100. Recommendation: Install with caution.