smart-bed

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install the eightctl and pyeight packages from the standard Python Package Index (PyPI). These are established community-maintained tools for Eight Sleep integration.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute local CLI commands for controlling the smart bed. The commands are limited to the specific functionality of the eightctl utility (e.g., status, set-temp, alarms).
  • [CREDENTIALS_UNSAFE]: The documentation guides the user to set up authentication using EIGHT_USER and EIGHT_PASS environment variables or a local configuration file. This is a standard and recommended practice for CLI-based authentication and does not involve hardcoded secrets within the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via the eightctl status and eightctl sleep-data commands. This constitutes a standard data ingestion surface for monitoring tasks, and the skill includes logic to ensure output remains concise, minimizing risks associated with processing external output.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 02:13 AM