zigbee2mqtt
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process state information and events originating from Zigbee devices and MQTT brokers. This ingestion of untrusted data creates a surface for indirect prompt injection if a malicious device or broker message attempts to influence the agent's reasoning.
- Ingestion points: The agent reads from
zigbee2mqtt/{device}(state updates) andzigbee2mqtt/bridge/event(network join/leave events). - Capability inventory: The agent is authorized via instructions to publish MQTT messages to control devices (
zigbee2mqtt/{device}/set) and manage bridge operations. - Boundary markers: No specific delimitation or instruction-override protections are defined for handling device-originating payloads.
- Sanitization: The skill does not define validation or filtering logic for external MQTT payloads before processing.
- [DYNAMIC_EXECUTION]: The skill documents the use of 'external converters,' which are JavaScript modules loaded and executed by the Zigbee2MQTT application at runtime.
- Evidence: The instructions in
SKILL.mdandreferences/converters.mddetail creating local.jsfiles and loading them via the application configuration. - The documentation in
references/converters.mdspecifically describes an MQTT-based management API (zigbee2mqtt/bridge/request/converter/save) that allows writing JavaScript code directly to the application's storage for runtime execution. - [COMMAND_EXECUTION]: The development setup documentation includes standard shell commands for environment preparation and execution.
- Evidence:
SKILL.mdincludesgit clone,pnpm install, andnode index.js. These are standard operational commands for the documented software. - [EXTERNAL_DOWNLOADS]: The skill references downloading the main application source code from its official repository.
- Evidence:
git clone https://github.com/Koenkk/zigbee2mqttpoints to the well-known project repository. In accordance with trust rules, this reference is informative and does not contribute to verdict escalation.
Audit Metadata