bluebubbles
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill's instructions and actions align with its stated purpose of managing iMessages via a BlueBubbles server. There are no signs of malicious intent, command injection, or unauthorized data access.- [NO_CODE]: The skill is entirely instructional, containing only documentation and JSON action schemas. It does not ship with any executable code, scripts, or binary files, significantly reducing its attack surface.- [DATA_EXFILTRATION]: While the skill defines a
sendAttachmentaction that accepts a file path, this is a standard and expected feature for a messaging bridge. The skill does not automate the collection or exfiltration of sensitive system files.- [CREDENTIALS_UNSAFE]: The documentation mentions the need for server credentials in the gateway configuration but correctly avoids hardcoding any actual secrets or tokens.
Audit Metadata