gtapps/ha-apply-change
plugins/claude-code-homeassistant-hermit/skills/ha-apply-change/SKILL.md
Validate and apply a generated HA automation or script YAML with safety checks and optional reload. Use after building or modifying an automation.
$ install --global
skillsauthnpx skillsauth add gtapps/claude-code-hermit ha-apply-changeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 13, 2026, 4:22 AM170.1s1 file scanned
SKILL.md
- name:
- ha-apply-change
- description:
- Validate and apply a generated HA automation or script YAML with safety checks and optional reload. Use after building or modifying an automation.
Apply HA Change
Steps
-
Pre-check: Run
${CLAUDE_PLUGIN_ROOT}/bin/ha-agent-lab ha policy-check <artifact_path>to verify safety. Read theseverityfield in the JSON output:"block"(strict mode): stop and explain why. Create a proposal via/claude-code-hermit:proposal-create."ask"(ask mode): useAskUserQuestionto confirm with the operator before proceeding. Show which sensitive entities triggered the prompt and what will be applied."allow": proceed to step 2.
-
Validate and apply: Run
${CLAUDE_PLUGIN_ROOT}/bin/ha-agent-lab ha validate-apply <artifact_path> --reload automation(orscript).- This runs HA config check, pushes the config to HA via REST, then reloads the domain.
- The artifact must include
id:at the top level — if missing, the CLI derives an ID from the alias or filename and warns in the output. A derived ID drifts if the alias is renamed, creating a duplicate.
-
Confirm with operator: Always ask before executing the apply. Show:
- The artifact being applied
- Policy check result
- What domain will be reloaded
-
Post-apply: Check the JSON output for
creation_okand read.claude-code-hermit/raw/audit-ha-apply-latest.md.creation_ok: true— config was pushed and verified via REST. Reload picks it up immediately.creation_ok: false+ message contains "YAML mode" — HA is in YAML config mode (403). Tell the operator to place the generated YAML in their HA config directory and reload manually.creation_ok: false+ other message — push failed with a validation error from HA. Show the error message and suggest fixing the YAML.- If overall successful: update your auto memory if this automation introduces a new pattern.
Safety
- The apply path only reloads
automationandscriptdomains. - Sensitive entities are blocked at the policy-check step.
- The operator must confirm before any reload happens.
Related Skills
gtapps/session-start
data-ai
VerifiedTrustedCommunity
Initializes or resumes a work session. Loads context from OPERATOR.md and SHELL.md, orients the agent, and establishes what to work on. Use at the beginning of every work session.
62SKILL.mdUpdated Apr 27, 2026
gtapps/hermit-evolve
tools
VerifiedTrustedCommunity
Evolves hermit configuration and templates after a plugin update. Detects version gaps, presents new features, walks through new settings. Run after updating the plugin.
62SKILL.mdUpdated Apr 27, 2026
gtapps/hatch
testing
VerifiedTrustedCommunity
Initializes the autonomous agent in the current project. Creates the state directory, templates, OPERATOR.md, and config.json. Appends session discipline to CLAUDE.md. Detects installed hermits. Run once per project, like git init.
62SKILL.mdUpdated Apr 27, 2026
gtapps/docker-setup
tools
VerifiedTrustedCommunity
Generates Docker scaffolding and walks the operator through the full deployment — token setup, build, start, MCP plugin configuration, workspace trust, and verification. Offers to back up and overwrite existing Docker files. Run after /hatch.
62SKILL.mdUpdated Apr 27, 2026