eightctl
Warn
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration specifies the installation of a Go binary from an unverified third-party GitHub repository (github.com/steipete/eightctl). This introduces a dependency on external code that is not from a trusted vendor or well-known service.
- [COMMAND_EXECUTION]: The skill is designed to execute the eightctl command-line utility for managing hardware (Eight Sleep pods). This involves executing system commands that could have side effects on the environment or handle sensitive data from the service's API.
Audit Metadata