home-assistant-card

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch markdown documentation from the official Home Assistant developers repository on GitHub. This is used solely for obtaining up-to-date API references from a well-known and trusted source.
  • [COMMAND_EXECUTION]: The instructions involve running standard, repository-local development commands such as npm test, npm run lint, and npm run build. These operations are expected within the context of a software development skill and utilize the user's existing project configuration.
  • [DATA_EXPOSURE]: The skill includes explicit instructions to ensure that lockfiles and package manager configurations do not inadvertently contain private or machine-local registry URLs when making dependency changes, which aligns with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 01:48 PM
Security Audit — agent-trust-hub — home-assistant-card