home-assistant-card
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch markdown documentation from the official Home Assistant developers repository on GitHub. This is used solely for obtaining up-to-date API references from a well-known and trusted source.
- [COMMAND_EXECUTION]: The instructions involve running standard, repository-local development commands such as
npm test,npm run lint, andnpm run build. These operations are expected within the context of a software development skill and utilize the user's existing project configuration. - [DATA_EXPOSURE]: The skill includes explicit instructions to ensure that lockfiles and package manager configurations do not inadvertently contain private or machine-local registry URLs when making dependency changes, which aligns with security best practices.
Audit Metadata