Dirigera Control (IKEA smart home)

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 1.0.3
• Hash: 65bca643b2271f66e58a17c6e90de90640f13610ce6677d961c0671fcf02175e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. All scripts and documentation are clearly aligned with the stated purpose of controlling IKEA Dirigera smart home devices. The `SKILL.md` provides legitimate instructions for the agent to interact with the user and the Dirigera hub for setup (e.g., finding IP, generating tokens), without any evidence of prompt injection attempts to manipulate the agent maliciously. Network access (e.g., `scripts/find_dirigera_ip.py` using `socket`, `subprocess.run(['arp', '-a'])`, and `scripts/generate_token_wrapper.py` using `requests` to the local hub IP) and file writing (`dirigera_token.txt`) are necessary and expected for the skill's functionality and do not show any intent for data exfiltration, malicious execution, or persistence.