ble-desk-lamp

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The SKILL.md file contains instructions to install the required ble-desk-lamp-pp-cli binary using the command npx -y @mvanhorn/printing-press-library install ble-desk-lamp --cli-only. This fetches the installation package from the npm registry.
  • [REMOTE_CODE_EXECUTION]: The use of npx to install and run the @mvanhorn/printing-press-library package constitutes remote code execution for the purpose of skill setup. The resource is owned by the skill's author (mvanhorn).
  • [COMMAND_EXECUTION]: The skill operates by executing the ble-desk-lamp-pp-cli binary to perform device discovery (scan), check status (status), and send commands (toggle) to the BLE lamp. The CLI implementation includes a --confirm-physical-effect flag to prevent accidental actuation of hardware.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:38 AM
Security Audit — agent-trust-hub — ble-desk-lamp