eightctl

SUSPICIOUS: the skill’s purpose matches smart-bed control, and the config/env access is proportionate, but it relies on an unofficial third-party CLI that receives the user’s Eight Sleep credentials and performs real-world device actions. No hidden exfiltration path or malware behavior is evident, yet install and credential trust are materially weaker than an official integration.