sleep
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill requires environment variables
HA_URLandHA_TOKENfor Home Assistant integration. The setup instructions correctly advise verifying these in the active runtime and choosing low-risk targets for initial testing, which aligns with security best practices for credential management. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input describing systems or processes to be suspended.
- Ingestion points: User-supplied system/process/notification channel descriptions via the
/sleepcommand. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the prompt template.
- Capability inventory: The skill references Home Assistant (
HA_TOKEN) andcurlfor potential integration actions, though the primary instructions focus on designing a plan. - Sanitization: No input validation or sanitization logic is described.
Audit Metadata