openhue
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill uses the openhue binary to perform legitimate smart home management tasks such as discovering bridges and toggling lights.
- [EXTERNAL_DOWNLOADS] (LOW): The skill installs the openhue-cli package via Homebrew (openhue/cli/openhue-cli). Although the source is not within the defined Trusted Organizations list, it is the standard distribution method for this specific utility.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill ingests JSON data from the Hue Bridge. While this represents a theoretical attack surface where a compromised bridge could provide malicious input, the current implementation handles it as data for status reporting.
Audit Metadata