Home Assistant YAML

Pass

Audited by Gen Agent Trust Hub on May 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation includes standard installation instructions for Home Assistant community tools, such as the HACS installation script from hacs.xyz and third-party libraries for custom card development via npm (e.g., lit, typescript). These are well-known resources within the Home Assistant ecosystem.
  • [COMMAND_EXECUTION]: The reference files provide numerous command-line examples for system management, including file operations (tar, cp, mv), backup utilities (rclone), and Home Assistant CLI commands (ha core ...). These are provided as instructional snippets for users performing manual maintenance.
  • [PROMPT_INJECTION]: The skill instructions in SKILL.md are focused on intent clarification and ensuring modern YAML syntax. There are no attempts to override agent safety protocols or hijack the conversation.
  • [DATA_EXPOSURE]: The skill explicitly advises best practices for security, such as using !secret for credentials and avoiding unvalidated user input in shell_command definitions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 30, 2026, 04:01 PM
Security Audit — agent-trust-hub — Home Assistant YAML