HomePod

• Analyzed: May 11, 2026, 4:58 AM
• Findings: 1
• Version: 1.0.0
• Hash: 291eefe7e23d527cd4e975c8df758a0dc9f589bc1ca05c1898f6c50874d74d76
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its reliance on shell execution (`atvremote` commands in `direct-control.md`) and the potential for prompt injection leading to arbitrary command execution, arbitrary outbound network requests via `play_url`, and arbitrary local file access via `stream_file`. While the skill includes guardrails for the agent (e.g., requiring confirmation for mutating actions), it lacks explicit instructions for input sanitization, making it vulnerable if user input is directly interpolated into shell commands. Additionally, the `atvremote` binary is a critical dependency for direct control but is not declared in the `_meta.json`'s `requires.bins` field, posing a transparency and potential supply chain risk.