ha-dashboard-cards
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements legitimate Home Assistant dashboard management functionality. It uses the official WebSocket API for retrieving and updating configurations.
- [DATA_EXFILTRATION]: Communication is restricted to the Home Assistant instance specified by the user in environment variables. No data is transmitted to external or untrusted servers.
- [CREDENTIALS_UNSAFE]: Authentication with Home Assistant is handled via environment variables (HA_LONG_LIVED_TOKEN). No hardcoded secrets or API keys were detected in the source code.
- [COMMAND_EXECUTION]: The provided scripts perform dictionary manipulations and API calls; they do not execute arbitrary shell commands or spawn untrusted subprocesses.
Audit Metadata