Fähigkeiten home-assistant-manager
📦

home-assistant-manager

Inhaltsrevision r1 Mittleres Risiko 🌐 Netzwerkzugriff📁 Dateisystemzugriff🔑 Umgebungsvariablen⚙️ Externe Befehle

Home Assistant-Deployments verwalten

Änderungen an Home Assistant können riskant sein, wenn Deployments, Reloads und Dashboards manuell gehandhabt werden. Dieser Skill gibt Claude, Codex und Claude Code strukturierte Workflows für Validierung, Deployment, Tests und Fehlerbehebung.

Unterstützt: Claude Codex Code(CC)
⚠️ 50 Schlecht

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "home-assistant-manager" from https://skillstore.io/skills/komal-skynet-home-assistant-manager.md and its manifest at https://skillstore.io/api/skills/komal-skynet-home-assistant-manager/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/komal-skynet-home-assistant-manager.md Signiertes manifest GET /api/skills/komal-skynet-home-assistant-manager/manifest Signiertes lockfile GET /api/skills/komal-skynet-home-assistant-manager/lockfile

Testen

„home-assistant-manager“ wird verwendet. Benutzer bittet darum, eine Automatisierung für Benachrichtigungen an der Haustür hinzuzufügen.

Erwartetes Ergebnis:

Der Assistent schlägt das Automatisierungsverhalten vor, identifiziert erforderliche Entitäten, empfiehlt einen Reload statt eines Neustarts und listet Validierungs-, Trigger-, Log- und Benachrichtigungsprüfungen auf.

„home-assistant-manager“ wird verwendet. Benutzer fragt, warum ein Dashboard nicht in der Seitenleiste angezeigt wird.

Erwartetes Ergebnis:

Der Assistent prüft, ob die Dashboard-Datei existiert, ob sie registriert ist, ob ein Neustart erforderlich ist und ob der Browser-Cache aktualisiert werden muss.

„home-assistant-manager“ wird verwendet. Benutzer meldet einen Template-Vergleichsfehler.

Erwartetes Ergebnis:

Der Assistent erklärt die wahrscheinliche Typabweichung, empfiehlt Template-Casting und skizziert dann, wie das Template getestet und bestätigt wird, dass die Logs sauber sind.

Sicherheitsaudit

Mittleres Risiko
v9 • 9.7.2026 Versionsbericht öffnen

The skill is not malicious, but it intentionally guides privileged Home Assistant operations through SSH, hass-cli, git, and scp. Confirmed risks center on remote command execution, writing Home Assistant .storage files, persistent token setup, and commands that can affect real devices; many scanner hits were Markdown, template, or screenshot false positives. No prompt injection attempt was found in the reviewed files.

3
Gescannte Dateien
1,023
Analysierte Zeilen
33
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel
README.md:294-296
Long-Lived Home Assistant Token in Shell Profile
The README tells users to add HASS_SERVER and HASS_TOKEN values to shell startup files. A Home Assistant token stored there can be exposed to shells, subprocesses, backups, or accidental sharing.
The setup instructions explicitly name ~/.bashrc or ~/.zshrc and then export HASS_TOKEN on the following line. This is a real secret persistence risk, although it is normal setup guidance rather than malicious behavior.
Mittel
SKILL.md:164-177SKILL.md:555-583
Automation Trigger Commands Can Affect Physical Devices
The skill encourages manual Home Assistant automation triggers and service calls during verification. Depending on the target automation, these actions can affect locks, climate, lights, notifications, or other connected devices.
The cited workflow directly invokes automation.trigger and common service-call commands. The impact depends on the user environment, but the physical-device side effect risk is clear.
Elemente der Fähigkeitsprüfung (33)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Hoch
README.md:294
Hidden file in home directory
# Set environment variables (add to ~/.bashrc or ~/.zshrc)
The README advises adding Home Assistant environment variables to ~/.bashrc or ~/.zshrc, and the nearby setup includes a long-lived access token. Persisting control tokens in shell startup files increases exposure.
Mittel
README.md:294
Hidden file access
# Set environment variables (add to ~/.bashrc or ~/.zshrc)
The README directs users to modify hidden shell startup files for Home Assistant environment variables. This is common setup guidance, but it can persist sensitive access tokens broadly.
Mittel
SKILL.md:25
Ruby/shell backtick execution
1. SSH access to Home Assistant instance (`root@homeassistant.local`)
The skill requires SSH access to root@homeassistant.local, enabling privileged remote management of Home Assistant. This is intended functionality, but it can change or restart the user system.
Mittel
SKILL.md:26
Ruby/shell backtick execution
2. `hass-cli` installed locally
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:35
Ruby/shell backtick execution
All `hass-cli` commands use environment variables automatically:
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:37-47
Ruby/shell backtick execution
```bash
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:51-63
Ruby/shell backtick execution
```bash
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:71-92
Ruby/shell backtick execution
```bash
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:96-98
Ruby/shell backtick execution
Use `scp` for quick testing before committing:
The workflow instructs copying files to the Home Assistant instance with scp. This can overwrite configuration or dashboard files, so it is a real operational risk even though it is not malicious.
Mittel
SKILL.md:98-112
Ruby/shell backtick execution
```bash
The workflow instructs copying files to the Home Assistant instance with scp. This can overwrite configuration or dashboard files, so it is a real operational risk even though it is not malicious.
Mittel
SKILL.md:131-132
Ruby/shell backtick execution
- ✅ Automations: `hass-cli service call automation.reload`
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:132-133
Ruby/shell backtick execution
- ✅ Scripts: `hass-cli service call script.reload`
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:133-134
Ruby/shell backtick execution
- ✅ Scenes: `hass-cli service call scene.reload`
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:134-135
Ruby/shell backtick execution
- ✅ Template entities: `hass-cli service call template.reload`
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:135-136
Ruby/shell backtick execution
- ✅ Groups: `hass-cli service call group.reload`
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:136-149
Ruby/shell backtick execution
- ✅ Themes: `hass-cli service call frontend.reload_themes`
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:149-152
Ruby/shell backtick execution
```bash
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:155-157
Ruby/shell backtick execution
```bash
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:160-162
Ruby/shell backtick execution
```bash
The skill instructs use of hass-cli with Home Assistant credentials to query state or call services. This is intended management behavior, but service calls can alter the running home automation system.
Mittel
SKILL.md:165-167
Ruby/shell backtick execution
```bash
The workflow manually triggers an automation through hass-cli. Triggering automations can send notifications or actuate connected devices, so user confirmation is needed.
Mittel
SKILL.md:175-178
Ruby/shell backtick execution
```bash
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:198-200
Ruby/shell backtick execution
```bash
The command reads Home Assistant entity state through authenticated hass-cli access. It is mostly read-only, but it exposes household state data and depends on sensitive credentials.
Mittel
SKILL.md:203-205
Ruby/shell backtick execution
```bash
The command reads Home Assistant entity state through authenticated hass-cli access. It is mostly read-only, but it exposes household state data and depends on sensitive credentials.
Mittel
SKILL.md:233-250
Ruby/shell backtick execution
```bash
The workflow instructs copying files to the Home Assistant instance with scp. This can overwrite configuration or dashboard files, so it is a real operational risk even though it is not malicious.
Mittel
SKILL.md:261-286
Ruby/shell backtick execution
```bash
The workflow instructs copying files to the Home Assistant instance with scp. This can overwrite configuration or dashboard files, so it is a real operational risk even though it is not malicious.
Mittel
SKILL.md:483-485
Ruby/shell backtick execution
```bash
The command reads Home Assistant entity state through authenticated hass-cli access. It is mostly read-only, but it exposes household state data and depends on sensitive credentials.
Mittel
SKILL.md:555-584
Ruby/shell backtick execution
```bash
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:588-603
Ruby/shell backtick execution
1. **Always check configuration** before restart: `ha core check`
The documented workflow runs SSH, git, or Home Assistant CLI operations against the remote /config environment. These commands are legitimate for this skill but carry operational risk if run without confirmation.
Mittel
SKILL.md:238
Hidden file access
scp .storage/lovelace.control_center root@homeassistant.local:/config/.storage/
This command copies files into Home Assistant .storage over SSH. That can alter dashboard configuration or registry data, so it is sensitive even when used for legitimate dashboard management.
Mittel
SKILL.md:278
Hidden file access
scp .storage/lovelace.new_dashboard root@homeassistant.local:/config/.storage/
This command copies files into Home Assistant .storage over SSH. That can alter dashboard configuration or registry data, so it is sensitive even when used for legitimate dashboard management.
Mittel
SKILL.md:279
Hidden file access
scp .storage/lovelace_dashboards root@homeassistant.local:/config/.storage/
This command copies files into Home Assistant .storage over SSH. That can alter dashboard configuration or registry data, so it is sensitive even when used for legitimate dashboard management.
Mittel
SKILL.md:576
Hidden file access
scp .storage/lovelace.my_dashboard root@homeassistant.local:/config/.storage/
This command copies files into Home Assistant .storage over SSH. That can alter dashboard configuration or registry data, so it is sensitive even when used for legitimate dashboard management.
Niedrig
README.md:315
Hardcoded URL
claude mcp add --transport http context7 https://mcp.context7.com/mcp \
The README configures Claude MCP to use the external Context7 endpoint. This is optional documentation access, but it sends requests and a user API key header to a third-party service.

Risikofaktoren

🌐 Netzwerkzugriff (3)
README.md:91 README.md:295 README.md:315
📁 Dateisystemzugriff (8)
README.md:294 README.md:294 SKILL.md:238 SKILL.md:278 SKILL.md:279 SKILL.md:576 SKILL.md:473 SKILL.md:577
🔑 Umgebungsvariablen (1)
README.md:316
⚙️ Externe Befehle (88)
SKILL.md:25 SKILL.md:26 SKILL.md:28 SKILL.md:35 SKILL.md:37-47 SKILL.md:47-51 SKILL.md:51-63 SKILL.md:63-71 SKILL.md:71-92 SKILL.md:92-96 SKILL.md:96-98 SKILL.md:98-112 SKILL.md:112-131 SKILL.md:131-132 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-135 SKILL.md:135-136 SKILL.md:136-149 SKILL.md:149-152 SKILL.md:152-155 SKILL.md:155-157 SKILL.md:157-160 SKILL.md:160-162 SKILL.md:162-165 SKILL.md:165-167 SKILL.md:167-175 SKILL.md:175-178 SKILL.md:178-181 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-187 SKILL.md:187-188 SKILL.md:188-189 SKILL.md:189 SKILL.md:198-200 SKILL.md:200-203 SKILL.md:203-205 SKILL.md:205-219 SKILL.md:219 SKILL.md:224-233 SKILL.md:233-250 SKILL.md:250-261 SKILL.md:261-286 SKILL.md:286-289 SKILL.md:289-296 SKILL.md:296-312 SKILL.md:312-337 SKILL.md:337-342 SKILL.md:342-351 SKILL.md:351-357 SKILL.md:357-365 SKILL.md:365-368 SKILL.md:368-371 SKILL.md:371-380 SKILL.md:380-387 SKILL.md:387-394 SKILL.md:394-397 SKILL.md:397-404 SKILL.md:404-407 SKILL.md:407-413 SKILL.md:413-415 SKILL.md:415 SKILL.md:426-436 SKILL.md:436-442 SKILL.md:442-452 SKILL.md:452-453 SKILL.md:453-454 SKILL.md:454 SKILL.md:455 SKILL.md:462-463 SKILL.md:463-472 SKILL.md:472-474 SKILL.md:474-477 SKILL.md:477-480 SKILL.md:480-483 SKILL.md:483-485 SKILL.md:485-494 SKILL.md:494-516 SKILL.md:516-519 SKILL.md:519-535 SKILL.md:535-538 SKILL.md:538-551 SKILL.md:551-555 SKILL.md:555-584 SKILL.md:584-588 SKILL.md:588-603 SKILL.md:603-623
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/komal-skynet-home-assistant-manager/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/komal-skynet-home-assistant-manager/security.svg)](https://skillstore.io/skills/komal-skynet-home-assistant-manager?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/komal-skynet-home-assistant-manager?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/komal-skynet-home-assistant-manager/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/komal-skynet-home-assistant-manager.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

komal-SkyNET. (2026). home-assistant-manager security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/komal-skynet-home-assistant-manager/audits/9

BibTeX-Zitat

@techreport{komal-skynet-komal-skynet-home-assistant-manager-2026, author = {komal-SkyNET}, title = {home-assistant-manager security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/komal-skynet-home-assistant-manager/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "home-assistant-manager security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "komal-SkyNET" date-released: "2026-07-09" url: "https://skillstore.io/skills/komal-skynet-home-assistant-manager/audits/9" identifiers: - type: other value: "skillstore:komal-skynet-home-assistant-manager:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
55
Architektur
85
Wartbarkeit
87
Inhalt
71
Gemeinschaft
78
Spezifikationskonformität

Was Sie erstellen können

Home Assistant-Konfigurationsänderungen deployen

Validierungs-, Deployment-, Reload-, Neustart- und Verifizierungsschritte für YAML, Skripte, Szenen und Template-Entitäten planen.

Automatisierungsfehler debuggen

Logs, manuelle Trigger, Statusprüfungen und Template-Korrekturen verwenden, um Automatisierungsfehler einzugrenzen und zu beheben.

Tablet-freundliche Lovelace-Dashboards erstellen

Dashboard-Layouts erstellen, Kartentypen auswählen, Storage-Dashboards registrieren und mit schnellen Vorschau-Workflows iterieren.

Diese Prompts ausprobieren

Mein Setup prüfen 
Prüfe mein Home Assistant-Projektsetup und sage mir, welche SSH-, hass-cli-, git- und Umgebungsvoraussetzungen fehlen, bevor ich Änderungen deploye.
Eine Automatisierung sicher deployen 
Hilf mir, eine Home Assistant-Automatisierung zu erstellen und zu deployen, und wähle dann den sichersten Reload- oder Neustartpfad sowie Verifizierungsschritte aus.
Ein Dashboard-Problem beheben 
Debugge, warum mein Lovelace-Dashboard nicht angezeigt wird oder Kartenfehler hat, und leite mich durch Validierung, Registrierung, Deployment und Browserprüfungen.
Einen vollständigen Workflow entwerfen 
Erstelle einen End-to-End-Workflow für Home Assistant-Änderungen, der lokale Bearbeitungen, Validierung, schnelle Tests, git-Historie, Deployment, Rollback, Logs und Benutzerbestätigungen abdeckt.

Bewährte Praktiken

  • Zielhost, Dateien und erwartete Geräteeffekte bestätigen, bevor SSH-, scp-, hass-cli-, Reload-, Neustart- oder Trigger-Befehle ausgeführt werden.
  • Konfigurations- und Dashboard-Syntax vor dem Deployment validieren, anschließend Logs und für Benutzer sichtbare Ergebnisse nach dem Deployment prüfen.
  • scp für temporäre Iterationen, git für stabile Änderungen und Backups vor dem Bearbeiten von Home Assistant-Storage-Dateien verwenden.

Vermeiden

  • Keine langlebigen Home Assistant-Token in gemeinsam genutzten Shell-Profilen, Repositories, Chat-Logs oder Screenshots speichern.
  • Home Assistant nicht neu starten, wenn ein gezielter Reload die Änderung sicher anwenden kann.
  • .storage-Dashboard-Dateien nicht überschreiben und Automatisierungen nicht ohne Benutzerfreigabe und Rollback-Plan auslösen.

Häufig gestellte Fragen

Wobei hilft dieser Skill?
Er hilft bei der Planung von Home Assistant-Konfigurationsänderungen, Deployments, Automatisierungsprüfungen, Log-Review und Lovelace-Dashboard-Workflows.
Erfordert er Zugriff auf meinen Home Assistant-Server?
Ja. Die dokumentierten Workflows erfordern vom Benutzer genehmigten SSH-Zugriff, hass-cli-Zugriff und Home Assistant-Anmeldedaten.
Kann er Dashboards erstellen?
Er bietet Muster für Lovelace-Dashboards, Storage-Dateien, Dashboard-Registrierung, View-Auswahl und Tablet-freundliche Layouts.
Kann er Geräte in meinem Zuhause ändern?
Er kann Serviceaufrufe und Automatisierungstrigger anleiten, die Geräte beeinflussen können, wenn der Benutzer diese Befehle genehmigt.
Ist das nur für Claude Code?
Der Skill ist für Workflows im Stil von Claude Code geschrieben, und die Marketplace-Metadaten listen außerdem Kompatibilität mit Claude und Codex auf.
Was sollte ich vor der Verwendung prüfen?
Prüfe Anmeldedaten, Zielhost, Befehlsfreigaben, Backups, generierte Konfiguration und alle Automatisierungen, die physische Geräte beeinflussen können.

Entwicklerdetails

Lizenz

MIT

Skillstore-Revision

r1

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/komal-SkyNET/claude-skill-homeassistant/tree/main/

Ref.

b959ebfd1043a07c0c4378ab94ca4342cb0259f5

Aktualität der Wartung

26.7.2026

Nutzung

8 Downloads · 236 Aufrufe

Dateistruktur

📄 dashboard.png

📄 LICENSE

📄 README.md

📄 SKILL.md