bleswiftcli-macos-bluetooth

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the ble command-line utility from an external GitHub repository (github.com/kylebrowning/BLESwiftCLI) using Homebrew, Mint, or manual compilation. These are standard methods for distributing developer tools.
  • [COMMAND_EXECUTION]: The skill's primary functionality is achieved by executing the ble tool with various arguments to interact with Bluetooth hardware. Examples include scanning for devices, connecting via UUID, and reading or writing characteristic values.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it ingests and displays data from untrusted external Bluetooth devices (such as device names and characteristic data).
  • Ingestion points: Data enters the agent context through the stdout/stderr of ble scan, ble read, and ble inspect commands.
  • Boundary markers: There are no specific delimiters or instructions provided to separate the external device data from the agent's instruction stream.
  • Capability inventory: The skill uses subprocess execution to run the ble utility on the host system.
  • Sanitization: No validation or sanitization of the Bluetooth-sourced data is performed before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:35 AM
Security Audit — agent-trust-hub — bleswiftcli-macos-bluetooth