home-assistant
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a set of legitimate tools for Home Assistant management. It handles sensitive authentication data correctly by retrieving the
HA_TOKENfrom environment variables rather than hardcoding secrets. - [EXTERNAL_DOWNLOADS]: The included Python scripts utilize the
uvpackage manager with inline dependency declarations forhomeassistant-api,requests, andwebsockets. These are well-known, established libraries sourced from the official Python Package Index (PyPI). - [COMMAND_EXECUTION]: The skill defines several scripts intended for execution via the
uv runcommand. While these scripts interact with the Home Assistant API and can perform state-changing operations (e.g.,ha_call_service.py), they are restricted to the user's local network (homeassistant.local) and require a valid local access token.
Audit Metadata