Automic Vault

brew package intelligence

openhue/cli/openhue-cli

Automic Vault tracks openhue/cli/openhue-cli because plain text hue application key matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about openhue/cli/openhue-cli

This package is present in local Automic Vault package data. The page is generated so package-specific security metadata has a stable URL.

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Hue Application Key

OpenHue CLI stores the Philips Hue application key in config.yaml. Our isotope stores the application key in the macOS keychain and injects it into a temporary config file while `openhue` runs.

Local README excerpt

OpenHue CLI Radioisotope

openhue setup and openhue config store the Philips Hue application key in config.yaml. The radioisotope moves that key into the macOS keychain, leaves the bridge configuration in place, and builds a temporary OpenHue config with the key injected while openhue runs.

The migration checks the active OpenHue config directory:

  • $XDG_CONFIG_HOME/openhue/config.yaml when XDG_CONFIG_HOME is set.
  • ~/.openhue/config.yaml otherwise.

Caveats

  • Only simple YAML Key: ... entries are migrated.
  • Running OpenHue's setup/config commands can write a new application key back

to the normal config file; rerun migration after changing the key.

  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/openhue-cli/README.md

Caveats

  • Only simple YAML Key entries are migrated.
  • Setup/config commands can write a new key that needs migration.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:openhue/cli/openhue-cli

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • local isotope README
  • radioisotope security manifest