blucli

Warn

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configuration specifies the installation of a Go-based command-line tool from a third-party repository: github.com/steipete/blucli/cmd/blu@latest. This involves downloading and executing code from a source outside of the trusted vendor list.
  • [COMMAND_EXECUTION]: The skill is designed to interact with the local environment by executing the blu binary. This tool is used to discover and control BluOS/NAD devices on the network, which involves sending commands and processing responses from local hardware.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 09:11 PM