homeassistant-dashboard-designer
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The Python script
scripts/validate_lovelace_view.pyemploys a custom YAML loader that extendsyaml.SafeLoader, ensuring that dashboard configurations are parsed without triggering unsafe code execution. - [COMMAND_EXECUTION]: The workflow incorporates standard Home Assistant validation utilities (
ha core check) to verify YAML files locally, which is an expected and secure administrative function. - [PROMPT_INJECTION]: The skill provides explicit instructions to prevent the direct adoption of code from external visual design tools, maintaining a strict boundary between advisory inspiration and implementation.
- [SAFE]: The skill's file access is limited to the Home Assistant dashboard configuration directory, consistent with its role in managing user views and templates.
Audit Metadata