camera-provider-eufy
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's stated purpose (local RTSP streaming and event clip retrieval from Eufy cameras) aligns with its capabilities. However, credential handling (username/password) and the lack of explicit security controls for data in transit/rest introduce moderate risk. The install pathway via requirements.txt without visible integrity verification is a potential supply-chain concern if dependencies are not vetted. Overall, the footprint is plausibly benign for a home-network camera integration but is moderately risky due to credential exposure and streaming data handling. Recommend adding secrets management, explicit TLS usage, and pinned/checksummed dependencies before deployment.
Confidence: 98%
Audit Metadata