xiao-webcam-sta
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing the agent to ask the user for WiFi credentials rather than hardcoding them or attempting to harvest them from the environment.
- [COMMAND_EXECUTION]: Uses
arduino-cliandcurlfor standard hardware development tasks: compiling, uploading firmware, and verifying local network connectivity. These commands are localized to the user's development environment and target the connected ESP32 board. - [EXTERNAL_DOWNLOADS]: The skill references an Edge Impulse library (
<project>_inferencing) which is a standard requirement for TinyML projects on microcontrollers. This is a well-known service in the hardware community. - [DATA_EXFILTRATION]: The templates establish a local web server on the ESP32 for image collection and inference results. All communication remains within the local area network (LAN) via mDNS or DHCP IP, and no external data exfiltration patterns were identified.
Audit Metadata