smart-bed
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install the
eightctlandpyeightpackages from the standard Python Package Index (PyPI). These are established community-maintained tools for Eight Sleep integration. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute local CLI commands for controlling the smart bed. The commands are limited to the specific functionality of theeightctlutility (e.g., status, set-temp, alarms). - [CREDENTIALS_UNSAFE]: The documentation guides the user to set up authentication using
EIGHT_USERandEIGHT_PASSenvironment variables or a local configuration file. This is a standard and recommended practice for CLI-based authentication and does not involve hardcoded secrets within the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via the
eightctl statusandeightctl sleep-datacommands. This constitutes a standard data ingestion surface for monitoring tasks, and the skill includes logic to ensure output remains concise, minimizing risks associated with processing external output.
Audit Metadata