bleswiftcli-macos-bluetooth
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the
blecommand-line utility from an external GitHub repository (github.com/kylebrowning/BLESwiftCLI) using Homebrew, Mint, or manual compilation. These are standard methods for distributing developer tools. - [COMMAND_EXECUTION]: The skill's primary functionality is achieved by executing the
bletool with various arguments to interact with Bluetooth hardware. Examples include scanning for devices, connecting via UUID, and reading or writing characteristic values. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it ingests and displays data from untrusted external Bluetooth devices (such as device names and characteristic data).
- Ingestion points: Data enters the agent context through the stdout/stderr of
ble scan,ble read, andble inspectcommands. - Boundary markers: There are no specific delimiters or instructions provided to separate the external device data from the agent's instruction stream.
- Capability inventory: The skill uses subprocess execution to run the
bleutility on the host system. - Sanitization: No validation or sanitization of the Bluetooth-sourced data is performed before it is processed by the agent.
Audit Metadata