advanced-homeassistant-mcp
An advanced MCP server for Home Assistant. 🔋 Batteries included.
0Tools
14Findings
49Stars
Mar 22, 2026Last Scanned
⚠3 critical · 9 high · 2 low findings detected
⚡Prompt Injection
Prompt & context manipulation attacks
PI-DIRDirect Input Injection
Injection via tool descriptions and parameter fields
GAP-001Prompt Injection Coverage GapMissing detection coverage for emerging prompt injection attack variants not addressed by current rules
PI-INDIndirect / Gateway Injection
Hidden instructions via external content and tool responses
PI-CTXContext Manipulation
Context window saturation and prior-approval exploitation
PI-ENCEncoding & Obfuscation
Payload hiding via invisible chars, base64, schema fields
PI-TPLTemplate & Output Poisoning
Injection via prompt templates and runtime tool output