zepp-os-communication
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the
network.downloadermodule used to fetch remote files to the mobile companion service, which is a standard feature of the Zepp OS framework. - [DATA_EXFILTRATION]: Documentation includes usage of the
fetchAPI andmessaging.peerSocket.sendto communicate with external HTTP endpoints. These operations are restricted to the mobile side-service as per the Zepp OS architecture and represent the core intended functionality for internet connectivity. - [INDIRECT_PROMPT_INJECTION]: The skill defines several data ingestion points, including
onRequesthandlers and Bluetooth message listeners (messaging.peerSocket.addListener). While these process external data, the documentation provides best practices for safety, such as type-checking and guarding JSON parsing operations. Capability inventory includes network access, file system operations for downloads, and BLE communication.
Audit Metadata