home-assistant

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a set of legitimate tools for Home Assistant management. It handles sensitive authentication data correctly by retrieving the HA_TOKEN from environment variables rather than hardcoding secrets.
  • [EXTERNAL_DOWNLOADS]: The included Python scripts utilize the uv package manager with inline dependency declarations for homeassistant-api, requests, and websockets. These are well-known, established libraries sourced from the official Python Package Index (PyPI).
  • [COMMAND_EXECUTION]: The skill defines several scripts intended for execution via the uv run command. While these scripts interact with the Home Assistant API and can perform state-changing operations (e.g., ha_call_service.py), they are restricted to the user's local network (homeassistant.local) and require a valid local access token.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 04:25 AM