skills/szkocot/skills/zigbee2mqtt/Gen Agent Trust Hub

zigbee2mqtt

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process state information and events originating from Zigbee devices and MQTT brokers. This ingestion of untrusted data creates a surface for indirect prompt injection if a malicious device or broker message attempts to influence the agent's reasoning.
  • Ingestion points: The agent reads from zigbee2mqtt/{device} (state updates) and zigbee2mqtt/bridge/event (network join/leave events).
  • Capability inventory: The agent is authorized via instructions to publish MQTT messages to control devices (zigbee2mqtt/{device}/set) and manage bridge operations.
  • Boundary markers: No specific delimitation or instruction-override protections are defined for handling device-originating payloads.
  • Sanitization: The skill does not define validation or filtering logic for external MQTT payloads before processing.
  • [DYNAMIC_EXECUTION]: The skill documents the use of 'external converters,' which are JavaScript modules loaded and executed by the Zigbee2MQTT application at runtime.
  • Evidence: The instructions in SKILL.md and references/converters.md detail creating local .js files and loading them via the application configuration.
  • The documentation in references/converters.md specifically describes an MQTT-based management API (zigbee2mqtt/bridge/request/converter/save) that allows writing JavaScript code directly to the application's storage for runtime execution.
  • [COMMAND_EXECUTION]: The development setup documentation includes standard shell commands for environment preparation and execution.
  • Evidence: SKILL.md includes git clone, pnpm install, and node index.js. These are standard operational commands for the documented software.
  • [EXTERNAL_DOWNLOADS]: The skill references downloading the main application source code from its official repository.
  • Evidence: git clone https://github.com/Koenkk/zigbee2mqtt points to the well-known project repository. In accordance with trust rules, this reference is informative and does not contribute to verdict escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 11:39 AM