iot-architect
Pass
Audited by Gen Agent Trust Hub on May 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/architect.pyprocesses user-supplied inputs for project names, nodes, and sensors. It implements proper sanitization using regular expressions (re.sub(r"[^a-zA-Z0-9_]", "_", s)) to ensure that generated Mermaid diagrams and C++ configurations do not contain malicious characters or escape the intended format. - [CREDENTIALS_UNSAFE]: The skill provides a template for managing credentials (
assets/templates/esp32/secrets.h.example) and explicitly instructs users to exclude sensitive files from version control via.gitignore. The provided example file contains only non-sensitive placeholders and public broker addresses, which is standard practice for template documentation. - [EXTERNAL_DOWNLOADS]: The
scripts/iotwrapper performs standard environment initialization usingpip install. Therequirements.txtfile is currently empty, meaning no third-party libraries are fetched by default. This process is transparent and localized to the skill's environment.
Audit Metadata