pikvm
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Utilizes
curlto communicate with the PiKVM API for remote hardware management, including mouse movement, keyboard input, and power controls. - [DATA_EXFILTRATION]: Employs environment variables (
$PIKVM_AUTHand$PIKVM_URL) to manage authentication and target endpoints, which is a recommended secure practice for handling credentials. - [DATA_EXFILTRATION]: Accesses the local file system to store temporary screenshot data at
/tmp/screenshot.jpgfor processing. - [COMMAND_EXECUTION]: Uses the
-kflag withcurlto bypass SSL certificate validation; this is standard for local network devices with self-signed certificates, though it avoids typical encryption verification.
Audit Metadata