iot-architect

Pass

Audited by Gen Agent Trust Hub on May 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The helper script scripts/architect.py processes user-supplied inputs for project names, nodes, and sensors. It implements proper sanitization using regular expressions (re.sub(r"[^a-zA-Z0-9_]", "_", s)) to ensure that generated Mermaid diagrams and C++ configurations do not contain malicious characters or escape the intended format.
  • [CREDENTIALS_UNSAFE]: The skill provides a template for managing credentials (assets/templates/esp32/secrets.h.example) and explicitly instructs users to exclude sensitive files from version control via .gitignore. The provided example file contains only non-sensitive placeholders and public broker addresses, which is standard practice for template documentation.
  • [EXTERNAL_DOWNLOADS]: The scripts/iot wrapper performs standard environment initialization using pip install. The requirements.txt file is currently empty, meaning no third-party libraries are fetched by default. This process is transparent and localized to the skill's environment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 30, 2026, 08:10 PM
Security Audit — agent-trust-hub — iot-architect