هذا التقرير غير مترجم إلى اللغة المطلوبة. يتم عرض التقرير الإنجليزي الأساسي بدلاً منه.
تقييم أمني مُحدَّث بالإصدار
معرّف التقرير: SA-3EE932E6
7/5/2026, 6:12:20 PM
home-assistant-manager تقييم أمني v7
تقرير شهادة أمان المهارة
نموذج التدقيق: codex تقرير تاريخي
- اسم المهارة
- home-assistant-manager
- الإصدار
- v7
- المشرف
- komal-SkyNET
- التغطية
- 3 الملفات التي تم فحصها · 1,023 الأسطر التي تم تحليلها
- إصدار السياسة
- غير متاح
أعلى مستوى خطورة لنتيجة مؤكدة
مرتفع
تتطلب 2 اكتشافات أمنية مؤكدة اهتمامًا.
سياق التثبيت
الأدلة التاريخية
قد لا يصف هذا التقرير العنصر القابل للتثبيت حاليًا. افتح صفحة المهارة الحالية للحصول على إرشادات التثبيت.
افتح صفحة Skill الحاليةلا يحظر هذا التقرير البيان أو ملف ZIP ولا يصرح بهما.
The package is a Markdown skill with a supporting dashboard image and no prompt injection text found in the reviewed files. Many static matches are Markdown formatting or documentation placeholders, but the skill intentionally guides agents through SSH, scp, git, hass-cli, and Home Assistant restart workflows. This should require explicit command review, scoped credentials, and careful handling of Home Assistant storage files.
موضع التقرير
تقرير تاريخي
افتح سجل التدقيق قبل استخدام هذا التقرير للتثبيت.
إقرار التدقيق
غير قابل للتصديق
الربط الثابت المطلوب غير مكتمل.
التحقق البشري
لم يتم التحقق منه
لم يتم تسجيل أي تحقق بشري لهذا التقرير.
التغطية
3 الملفات التي تم فحصها · 1,023 الأسطر التي تم تحليلها
35 عناصر معروضة للمراجعة
القيود
لا يدّعي هذا التقرير تنفيذًا في وقت التشغيل أو ضمن بيئة معزولة، ولا يثبت عدم وجود آثار جانبية.
سلسلة الأدلة
اتبع الأدلة من ربط المصدر إلى عقد التثبيت. تدعم الأدلة المتاحة التحقق؛ لكنها ليست ضمانًا للسلامة.
المصدر
الربط غير متاح
العنصر البرمجي
الهوية غير مكتملة
التدقيق
مكتمل
القدرات المرصودة
تعني «تمت ملاحظته» أن هذا التقرير سجل أدلة داعمة. ولا يثبت عدم التسجيل أن القدرة غير موجودة.
يحتوي على سكربتات
قد ينفذ تعليمات برمجية مضمنة مع المهارة.
لم يتم تسجيله بواسطة هذا التدقيق
الوصول إلى الشبكة
قد يتصل بخدمات خارجية.
تمت ملاحظته في 3 مواضع أدلة
الوصول إلى نظام الملفات
قد يقرأ أو يكتب ملفات محلية.
تمت ملاحظته في 7 مواضع أدلة
متغيرات البيئة
قد يقرأ قيماً من بيئة العملية.
تمت ملاحظته في موضع دليل واحد 1
الأوامر الخارجية
قد يستدعي أوامر أو برامج خارج المهارة.
تمت ملاحظته في 88 مواضع أدلة
عناصر مراجعة القدرات (33)
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
مرتفع
Ruby/shell backtick execution
```bash
The surrounding workflow instructs agents to use SSH, scp, git, hass-cli, or Home Assistant restart operations against a live instance. These commands can modify configuration or disrupt service if run without review.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
Use `scp` for quick testing before committing:
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
- ✅ Automations: `hass-cli service call automation.reload`
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
- ✅ Scripts: `hass-cli service call script.reload`
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
- ✅ Scenes: `hass-cli service call scene.reload`
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
- ✅ Template entities: `hass-cli service call template.reload`
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
- ✅ Groups: `hass-cli service call group.reload`
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
- ✅ Themes: `hass-cli service call frontend.reload_themes`
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```bash
The flagged range includes local validation or workflow command references. The commands are expected and low-impact, but still require user review before execution.
متوسط
Ruby/shell backtick execution
```bash
The surrounding text contains hass-cli or SSH command examples for querying state, reloading services, triggering automations, or reading logs. These are legitimate management actions but carry operational and privacy risk.
متوسط
Ruby/shell backtick execution
```
The flagged range includes local validation or workflow command references. The commands are expected and low-impact, but still require user review before execution.
متوسط
Ruby/shell backtick execution
1. **Always check configuration** before restart: `ha core check`
The flagged range includes local validation or workflow command references. The commands are expected and low-impact, but still require user review before execution.
متوسط
Ruby/shell backtick execution
```
The flagged range includes local validation or workflow command references. The commands are expected and low-impact, but still require user review before execution.
متوسط
Hidden file access
scp .storage/lovelace.control_center root@homeassistant.local:/config/.storage/
The workflow copies dashboard files into Home Assistant internal .storage paths over scp. Editing this hidden storage area can corrupt dashboards or expose configuration if mishandled.
متوسط
Hidden file access
scp .storage/lovelace.new_dashboard root@homeassistant.local:/config/.storage/
The workflow copies dashboard files into Home Assistant internal .storage paths over scp. Editing this hidden storage area can corrupt dashboards or expose configuration if mishandled.
متوسط
Hidden file access
scp .storage/lovelace_dashboards root@homeassistant.local:/config/.storage/
The workflow copies dashboard files into Home Assistant internal .storage paths over scp. Editing this hidden storage area can corrupt dashboards or expose configuration if mishandled.
متوسط
Hidden file access
scp .storage/lovelace.my_dashboard root@homeassistant.local:/config/.storage/
The workflow copies dashboard files into Home Assistant internal .storage paths over scp. Editing this hidden storage area can corrupt dashboards or expose configuration if mishandled.
منخفض
Hardcoded URL
curl -L https://github.com/komal-SkyNET/claude-skill-homeassistant/archive/main.tar.gz | tar xz --st
The README downloads the skill archive over HTTPS and extracts it without a pinned checksum. This is expected installation guidance, but it is a supply-chain risk if the source changes or is compromised.
منخفض
Hardcoded URL
claude mcp add --transport http context7 https://mcp.context7.com/mcp \
The README configures an optional external Context7 MCP HTTP endpoint. This is disclosed documentation access, but it still sends requests to a third-party service.
نتائج المخاطر
يتم فصل المخاوف الأمنية المؤكدة عن العناصر التي لا تزال بحاجة إلى مراجعة.
مخاوف أمنية مؤكدة (2)
RISK-001 مرتفع
Privileged Home Assistant Control Workflow
The skill directs agents to use root SSH, scp, hass-cli, git pull, and Home Assistant restart or reload operations. These actions can change live smart home configuration, expose logs, or disrupt devices if run without explicit review.
Multiple reviewed workflows explicitly use root SSH, scp, git pull, hass-cli service calls, and restart commands. The purpose is legitimate management, but the granted operational authority is broad.
RISK-002 متوسط
Plaintext Token Setup Guidance
The README suggests exporting HASS_TOKEN in shell startup files and passing a Context7 API key in a CLI header. These examples may expose user-provided credentials through readable profiles, terminal history, or process listings.
The examples contain placeholders, not embedded secrets, but they document credential handling patterns that can leak real tokens. The cited lines are setup instructions users are expected to follow.
إجراءات المعالجة
سجّل هذا التدقيق الإصلاحات المقترحة. تطبيقها مسؤولية المشرف على الصيانة.
- FIX-001مرتفعPrivileged remote command workflowsRequire explicit user confirmation before any SSH, scp, git, hass-cli, reload, or restart command is executed.
- FIX-002مرتفعRoot SSH examplesPrefer least-privilege Home Assistant access where possible and clearly warn users before commands target root@homeassistant.local.
- FIX-003متوسطDirect .storage dashboard editsAdd backup, syntax validation, and rollback steps before copying files into Home Assistant .storage paths.
- FIX-004متوسطCredential setup guidanceRecommend a secret manager or protected environment file, and avoid placing tokens in shell history or command-line headers.
- FIX-005منخفضUnpinned archive downloadPin installation instructions to a release tag or commit and document checksum verification for downloaded archives.
أدلة الخبراء
هوية موضوع غير قابلة للتغيير، وبيانات تعريف الماسح الضوئي، والمطابقات المستبعدة، والأدلة على مستوى المصدر.
موضوع العنصر البرمجي
- التزام Marketplace
- غير متاح
- تجزئة المحتوى
- غير متاح
- تجزئة الشجرة
- غير متاح
- مسار Skill
- غير متاح
- تجزئة حمولة التدقيق
- غير متاح
البيانات الوصفية للتحليل
نموذج التدقيق: codex
حالة التحليل: مكتمل
النطاق محدود بالملفات والأسطر والأساليب والأدلة المسجلة. لا يُدّعى تنفيذ وقت التشغيل أو بيئة الاختبار المعزولة.
التحقق والتصدير
يربط البيان وملف القفل عناصر التثبيت بتجزئات تشفيرية. هذا الادعاء المتعلق بالسلامة منفصل عن التقييم الأمني.
إقرار التدقيق: not_attestable