Is buddyh/alexa-cli safe?
Yes. buddyh/alexa-cli is safe to install. Oathe's behavioral security audit gave the alexa-cli skill by buddyh a trust score of 97/100 with 3 findings, none critical or high.
https://github.com/buddyh/alexa-cli
Is buddyh/alexa-cli safe to install?
This is a legitimate Go CLI tool for controlling Amazon Alexa devices that was incorrectly submitted as an AI agent skill. The empty SKILL.md file and clean codebase present no security risks, though some system-level file access was observed during installation.
What security issues were found in buddyh/alexa-cli?
Category Scores
Findings (3)
INFO Empty SKILL.md file 0 ▶
The SKILL.md file is completely empty, containing no instructions for AI agent behavior. This is unusual for a skill submission but poses no security risk.
LOW System-level canary file access -10 ▶
During installation, system processes accessed sensitive canary files (.env, SSH keys, AWS credentials, etc.), but this appears to be normal system behavior and no actual exfiltration was detected.
INFO Legitimate CLI tool misclassified as skill -10 ▶
This appears to be a legitimate Go CLI tool for controlling Amazon Alexa devices rather than an AI agent skill. The empty SKILL.md and focus on smart home automation suggest it was incorrectly submitted as a skill.
Should I install buddyh/alexa-cli?
Oathe's verdict for buddyh/alexa-cli is SAFE with a trust score of 97/100. Recommendation: Install.