The skill exposes camera credentials via command-line arguments, risking sensitive information leakage in logs and process lists.
Claims to do
camsnap: Use `camsnap` to grab snapshots, clips, or motion events from configured cameras.
Actually does
This skill uses the `camsnap` command-line tool to interact with configured RTSP/ONVIF cameras. It can add camera configurations to `~/.config/camsnap/config.yaml`, discover cameras, capture snapshots, record video clips, and monitor for motion events. It requires `ffmpeg` to be available on the system's PATH.
openclaw skills install steipete/camsnapThe `camsnap add` command requires camera credentials (`--user`, `--pass`) to be passed directly as command-line arguments. This method can lead to the exposure of sensitive information in process lists, command history, or logs if not handled securely by the agent.
camsnap add --name kitchen --host 192.168.0.10 --user user --pass pass
[](https://mondoo.com/ai-agent-security/skills/clawhub/steipete/camsnap)<a href="https://mondoo.com/ai-agent-security/skills/clawhub/steipete/camsnap"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/steipete/camsnap.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/clawhub/steipete/camsnap.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.