google-agents-cli-workflow

The supplied fragment is documentation for a plugin and command-override system. It contains no direct malware or data-theft implementation. However, the described mechanism is inherently security-sensitive because installed extensions execute arbitrary code and can override commands, especially at global scope or when trust prompts are bypassed. Review the actual extension YAML and scripts before installation, prefer project scope, pin immutable commit SHAs, and avoid untrusted --yes installations.