gtapps/ha-automation-diff
plugins/claude-code-homeassistant-hermit/skills/ha-automation-diff/SKILL.md
Report which Home Assistant automations were added, removed, edited, enabled, or disabled since the last snapshot — change memory across sessions, including UI edits that bypass this plugin. Read-only. Use when the operator asks "what changed", "what moved since last time", or to explain a regression.
$ install --global
skillsauthnpx skillsauth add gtapps/claude-code-hermit ha-automation-diffInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 26, 2026, 4:12 AM122.0s1 file scanned
SKILL.md
- name:
- ha-automation-diff
- description:
- Report which Home Assistant automations were added, removed, edited, enabled, or disabled since the last snapshot — change memory across sessions, including UI edits that bypass this plugin. Read-only. Use when the operator asks "what changed", "what moved since last time", or to explain a regression.
HA Automation Diff
Purpose
ha-safety-audit catches POLICY drift at a point in time. This skill catches CHANGE drift: which automations were added, removed, edited, enabled, or disabled since the last snapshot — including edits made directly in the HA UI that bypass ha-build-automation. It gives the hermit a memory of "what moved" between sessions, which is what explains regressions and keeps the estate legible.
It is read-only against Home Assistant: it enumerates automations, hashes each stored config, and diffs against the previous snapshot.
Steps
- Run
${CLAUDE_PLUGIN_ROOT}/bin/ha-agent-lab ha automation-diff. - The command writes a JSON snapshot to
.claude-code-hermit/raw/snapshot-ha-automations-latest.json(the baseline for the next run) and a markdown findings artifact under.claude-code-hermit/raw/audit-ha-automation-diff-*, and prints a stdout findings block. - Pass the stdout block through unchanged.
Output contract
ha-automation-diff findings — YYYY-MM-DD
Changes since last snapshot: K
- added: <name> (`<id>`)
- removed: <name> (`<id>`)
- edited: <name> (`<id>`)
- disabled: <name> (`<id>`)
- enabled: <name> (`<id>`)
Untracked (YAML-packaged, config not diffable): M
First run (no prior snapshot): Baseline established. (N automations tracked).
No changes: No changes since last snapshot. (N automations tracked).
Failure modes
- HA unreachable → CLI exits non-zero with an error message. Treat as "skipped, cannot diff"; do not retry automatically.
- YAML-packaged automations have no numeric id and are not REST-retrievable, so their config is not diffable. They are counted under "Untracked" rather than silently dropped — the diff is honest about what it does not cover.
Related Skills
gtapps/fitness-brief
tools
VerifiedTrustedCommunity
Composes and delivers the daily fitness brief — a forward-looking morning read (readiness + today's plan) or a backward-looking evening read (today's training, or an earned-rest note, + tomorrow's setup) — in the operator's configured voice. Invoke with /claude-code-fitness-hermit:fitness-brief --morning|--evening|--slot <name>. Becomes the plugin's two daily beats — the morning Strava connectivity check and the evening activity sync, RPE binding, and Run deep-dive.
68SKILL.mdUpdated Jul 25, 2026
gtapps/relogin
development
VerifiedTrustedCommunity
Renew the hermit's long-lived Claude login token over the channel, before it expires. Relays a one-time sign-in link to the operator, takes the code back, installs the new token, and restarts. Activates on messages like 'relogin', 'renew my login', 'reauth', 'the login is expiring', or when doctor's credential-expiry check flags setup-token.
68SKILL.mdUpdated Jul 22, 2026
gtapps/weekly-digest
development
VerifiedTrustedCommunity
Synthesizes the past 7 days of archived briefs into a weekly digest — top stories, emerging vs faded themes, category activity, and per-source performance built from archive frontmatter. Delivers to the operator's configured channel and archives a weekly note. Designed as a weekly routine. Invoke with /feed-hermit:weekly-digest.
68SKILL.mdUpdated Jul 21, 2026
gtapps/story-arcs
development
VerifiedTrustedCommunity
Manage developing story arcs tracked across briefs — add, resolve, and list active arcs in compiled/story-arcs-*.md. Arc Watch keywords drive the feed-brief arc-tagging enrichment. Invoke with /feed-hermit:story-arcs add|resolve|list.
68SKILL.mdUpdated Jul 21, 2026