HA Integration Dev

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/multi-device-hub/api.py

This is a hub API client, not evidence of intentional malware. Its primary security concern is sending the API key and control traffic over plaintext HTTP to the configured host, which permits network interception; caller-provided device and switch IDs are also inserted into paths without encoding. No fixed domain, IP address, or hardcoded credential is present. The excerpt is syntactically invalid because the exception classes have no bodies.

Confidence: 99%Severity: 62%
Audit Metadata
Analyzed At
Oct 21, 2026, 02:50 AM
Package URL
pkg:socket/skills-sh/tonylofgren%2Faurora-smart-home%2Fha-integration-dev%2F@291eded83e3525cdf2588063fac8693e5a5246b8ea24974a84e272383864d64f