Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Yandex smart-home controller, but it gives an agent direct control over real devices and scenarios without enough confirmation or token-safety guidance.
Install only if you intend to let the agent control your Yandex smart-home devices. Use the least-privilege token you can, keep the token out of chats and logs, revoke it if exposed, and require manual confirmation before group actions, scenario launches, or commands like turning everything off.
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
Используй эту команду в начале, чтобы узнать ID устройств:
curl -s -X GET "$BASE_URL/user/info" \
-H "$AUTH" | python3 -m json.tool
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s -X GET "$BASE_URL/devices/{DEVICE_ID}" \
-H "$AUTH" | python3 -m json.tool
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s -X POST "$BASE_URL/devices/actions" \
-H "$AUTH" \
-H "Content-Type: application/json" \
-d '{
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s -X POST "$BASE_URL/groups/{GROUP_ID}/actions" \
-H "$AUTH" \
-H "Content-Type: application/json" \
-d '{
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s -X POST "$BASE_URL/scenarios/{SCENARIO_ID}/actions" \
-H "$AUTH" | python3 -m json.tool
Suspicious Unicode normalization or mixed-script content
The skill requires a sensitive OAuth bearer token with view and control scopes, but it does not warn users not to paste, log, echo, or otherwise expose the token. Because bearer tokens grant direct API access to smart-home inventory and control functions, disclosure can allow an attacker to enumerate devices and control them remotely.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
BASE_URL=https://api.iot.yandex.net/v1.0
AUTH=Authorization: Bearer $YANDEX_IOT_TOKEN
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
BASE_URL=https://api.iot.yandex.net/v1.0
AUTH=Authorization: Bearer $YANDEX_IOT_TOKEN
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
BASE_URL=https://api.iot.yandex.net/v1.0
AUTH=Authorization: Bearer $YANDEX_IOT_TOKEN
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
BASE_URL=https://api.iot.yandex.net/v1.0
AUTH=Authorization: Bearer $YANDEX_IOT_TOKEN
This skill provides direct state-changing operations for physical smart-home devices and scenarios, including bulk/group actions, but does not include explicit safety guidance, confirmation requirements, or warnings about affecting the physical environment. In context, this is more dangerous because the API can change device states in the real world (lights, thermostats, scenarios), so accidental or manipulated execution can cause unwanted physical effects or privacy/safety issues.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "$BASE_URL/devices/actions" \
-H "$AUTH" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "$BASE_URL/groups/{GROUP_ID}/actions" \
-H "$AUTH" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Включить лампу:
curl -s -X POST "https://api.iot.yandex.net/v1.0/devices/actions" \
-H "Authorization: Bearer $YANDEX_IOT_TOKEN" \
-H "Content-Type: application/json" \
-d '{"devices":[{"id":"DEVICE_ID","actions":[{"type":"devices.capabilities.on_off","state":{"instance":"on","value":true}}]}]}'
No suspicious patterns detected.