aurora
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs an update check by executing the
ghCLI tool to query the latest release tag from its official GitHub repository (tonylofgren/aurora-smart-home). It also usesgit ls-filesin utility scripts to manage project files. - [EXTERNAL_DOWNLOADS]: A utility script (
sync_jlcpcb_status.py) fetches component lifecycle data from a public repository on GitHub (CDFER/jlcpcb-parts-database) and queries the JLCPCB parts API for stock levels. These operations are directly related to the skill's hardware design capabilities and target well-known services. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements to generate firmware, automations, and dashboards. It interpolates user-provided strings (like entity names and room labels) into templates. This attack surface is mitigated by a multi-layered validation system, including Iron Laws and dedicated validator modules (e.g.,
secrets-validator,entity-id-validator,async-correctness-validator) that sanitize and verify the generated output before delivery.
Audit Metadata