Google Home/Nest

• Analyzed: May 14, 2026, 3:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: 260c712ff041773f16750d1421e1293274ec74ac125d325f0b0e8e3855003246
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. The `SKILL.md` provides clear instructions for users to set up Google Cloud credentials and interact with the Google Smart Device Management API using `curl` and `jq`. While `curl` and `jq` are powerful tools, their use is directly aligned with the stated purpose of controlling Google Nest devices. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent to perform actions beyond the skill's stated purpose. The instructions for handling API keys are standard for such integrations.