ble-opaque-binary

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions in SKILL.md direct the user to install the ble-opaque-binary-pp-cli tool using npx -y @mvanhorn/printing-press-library install ble-opaque-binary --cli-only. This command fetches and executes the installer from the author's official NPM package.
  • [COMMAND_EXECUTION]: The skill operates by executing the ble-opaque-binary-pp-cli binary to perform discovery (scan), status checks, and capability reporting.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes telemetry data from external BLE devices, which represents a potential attack surface where a device could provide malicious input to the agent context.
  • Ingestion points: BLE characteristic data read via the status command.
  • Boundary markers: No specific boundary markers or 'ignore' instructions are present in the command output templates.
  • Capability inventory: The skill has the ability to execute the CLI tool and perform BLE network communication via the tinygo.org/x/bluetooth library.
  • Sanitization: The tool outputs telemetry derived from device GATT characteristics; no explicit sanitization or validation of the device-provided strings is performed before returning them to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:38 AM
Security Audit — agent-trust-hub — ble-opaque-binary