openhue
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill metadata instructions install the
openhue-clitool from a third-party Homebrew tap (openhue/cli/openhue-cli). - [COMMAND_EXECUTION]: The skill operates by executing shell commands using the
openhueutility to manage Hue bridge resources. - [INDIRECT_PROMPT_INJECTION]: The skill maps natural language inputs for lights, rooms, and scenes directly to CLI arguments, creating a surface for indirect prompt injection.
- Ingestion points: Resource identifiers (e.g., "Bedroom Lamp") provided by the user.
- Boundary markers: None present to distinguish data from instructions.
- Capability inventory: The skill uses shell command execution via the
openhuebinary. - Sanitization: No input validation or character escaping is defined for the user-supplied strings.
Audit Metadata