ha-api
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes security best practices by explicitly instructing users to store sensitive Long-Lived Access Tokens in environment variables or secure vaults, and warns against committing them to version control or sharing them in logs.
- [SAFE]: All code examples and implementation patterns for REST and WebSocket communication use standard, legitimate methods consistent with Home Assistant's official developer documentation.
- [SAFE]: Dependencies listed (requests, aiohttp) are well-known, industry-standard libraries for handling HTTP and WebSocket connections in Python, and the JavaScript examples rely on native browser/Node.js APIs.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected in the instructions or code snippets.
Audit Metadata