smart-home
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Employs
curlandjqcommands to interact with local IoT device APIs for device discovery and state management. - [EXTERNAL_DOWNLOADS]: Contacts
discovery.meethue.com, a well-known official service provided by Philips Hue, to locate bridge hardware on the local network. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads device state and metadata (e.g., scene names, light states) from local Home Assistant and Philips Hue API responses in
SKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are provided when processing device data.
- Capability inventory: The skill uses
curlfor network requests andjqfor JSON parsing across all commands. - Sanitization: No specific sanitization or filtering is applied to the data retrieved from the IoT APIs before it is displayed or processed.
Audit Metadata