esp32-workbench-ota
Facilitates over-the-air firmware updates for ESP32 devices, enabling seamless updates without serial connections.
Install this skill
Security score
The esp32-workbench-ota skill was audited on Mar 3, 2026 and we found 21 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 38 | curl -X POST http://192.168.0.87:8080/api/firmware/upload \ |
Curl to non-GitHub URL
| 48 | curl -s http://192.168.0.87:8080/api/firmware/list | jq . |
Curl to non-GitHub URL
| 58 | curl -X DELETE http://192.168.0.87:8080/api/udplog |
Curl to non-GitHub URL
| 66 | curl -X POST http://192.168.0.87:8080/api/wifi/http \ |
Curl to non-GitHub URL
| 75 | curl "http://192.168.0.87:8080/api/udplog?limit=50" |
Curl to non-GitHub URL
| 78 | curl -X POST http://192.168.0.87:8080/api/serial/monitor \ |
Curl to non-GitHub URL
| 87 | curl http://192.168.0.87:8080/api/firmware/list |
Curl to non-GitHub URL
| 90 | curl -X DELETE http://192.168.0.87:8080/api/firmware/delete \ |
External URL reference
| 8 | Base URL: `http://192.168.0.87:8080` |
External URL reference
| 38 | curl -X POST http://192.168.0.87:8080/api/firmware/upload \ |
External URL reference
| 48 | curl -s http://192.168.0.87:8080/api/firmware/list | jq . |
External URL reference
| 53 | The device must be able to reach `http://192.168.0.87:8080`. Use enter-portal to provision if needed (see esp32-workbench-wifi). |
External URL reference
| 58 | curl -X DELETE http://192.168.0.87:8080/api/udplog |
External URL reference
| 64 | OTA_BODY=$(echo -n '{"url":"http://192.168.0.87:8080/firmware/my-project/firmware.bin"}' | base64) |
External URL reference
| 66 | curl -X POST http://192.168.0.87:8080/api/wifi/http \ |
External URL reference
| 68 | -d "{\"method\": \"POST\", \"url\": \"http://192.168.4.2/ota\", \"headers\": {\"Content-Type\": \"application/json\"}, \"body\": \"$OTA_BODY\", \"timeout\": 30}" |
External URL reference
| 75 | curl "http://192.168.0.87:8080/api/udplog?limit=50" |
External URL reference
| 78 | curl -X POST http://192.168.0.87:8080/api/serial/monitor \ |
External URL reference
| 87 | curl http://192.168.0.87:8080/api/firmware/list |
External URL reference
| 90 | curl -X DELETE http://192.168.0.87:8080/api/firmware/delete \ |
External URL reference
| 95 | # http://192.168.0.87:8080/firmware/<project>/<filename> |
Install this skill with one command
/learn @sensorsiot/esp32-workbench-ota