xiaomi-cam-snapshot
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute
docker runandpythoncommands to set up the local backend and run the client script. - [EXTERNAL_DOWNLOADS]: The skill downloads a Docker image from
ghcr.io/tiancheng91/miloco-backend:dev. This represents the vendor's own backend service used for the skill's primary functionality. - [DATA_EXPOSURE]: The client script handles local authentication tokens (cookies) and passwords provided via command-line arguments or environment variables (
MILOCO_PASSWORD) to communicate with the local Miloco server. - [NETWORK_OPERATIONS]: The script communicates with
http://localhost:8001(local backend) andhttp://micam.appsvc.net(external image service) to fetch camera data and snapshots. These operations are core to the skill's documented purpose.
Audit Metadata