openhue
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious behavior or security vulnerabilities were identified during the analysis.
- [EXTERNAL_DOWNLOADS]: The skill references the OpenHue CLI tool, providing installation instructions through the Homebrew package manager (
openhue/cli/openhue-cli). This is a legitimate dependency for the skill's stated purpose of controlling smart lighting. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill retrieves resource names (lights, rooms, scenes) from the local Hue Bridge via
openhue getcommands. - Boundary markers: None identified in the provided command examples.
- Capability inventory: Uses the
openhueCLI to execute lighting control commands via the system shell. - Sanitization: The skill relies on the underlying CLI tool and agent shell execution environment to handle resource names safely.
Audit Metadata