ble-opaque-binary
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions in
SKILL.mddirect the user to install theble-opaque-binary-pp-clitool usingnpx -y @mvanhorn/printing-press-library install ble-opaque-binary --cli-only. This command fetches and executes the installer from the author's official NPM package. - [COMMAND_EXECUTION]: The skill operates by executing the
ble-opaque-binary-pp-clibinary to perform discovery (scan), status checks, and capability reporting. - [INDIRECT_PROMPT_INJECTION]: The skill processes telemetry data from external BLE devices, which represents a potential attack surface where a device could provide malicious input to the agent context.
- Ingestion points: BLE characteristic data read via the
statuscommand. - Boundary markers: No specific boundary markers or 'ignore' instructions are present in the command output templates.
- Capability inventory: The skill has the ability to execute the CLI tool and perform BLE network communication via the
tinygo.org/x/bluetoothlibrary. - Sanitization: The tool outputs telemetry derived from device GATT characteristics; no explicit sanitization or validation of the device-provided strings is performed before returning them to the agent.
Audit Metadata