eightctl
Warn
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installation instructions fetch the
eightctltool from a third-party, personal GitHub repository (github.com/steipete/eightctl). - [REMOTE_CODE_EXECUTION]: The skill uses the
go installmethod to download and compile remote code during the installation process. The use of the@latestversion constraint means the code executed is not pinned to a specific version and could change without user oversight. - [COMMAND_EXECUTION]: The skill is designed to execute the
eightctlbinary to interact with hardware and system settings, including modifying temperatures and alarm schedules. - [CREDENTIALS_UNSAFE]: The skill documentation explicitly references the storage and use of sensitive credentials, including
EIGHTCTL_EMAIL,EIGHTCTL_PASSWORD, and the configuration file path~/.config/eightctl/config.yaml.
Audit Metadata