hytale-plugin-basics

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • SAFE (SAFE): No security issues were detected. The script 'create-plugin.sh' implements strict regex validation for the plugin name variable, which prevents path traversal or directory escape.
  • Command Injection Prevention: All shell variables used in directory creation, file removal, and file generation are properly enclosed in double quotes, preventing word splitting or execution of untrusted input.
  • Project Scaffolding: The generation of project files like build.gradle and Java classes follows standard development practices and does not include any suspicious dependencies or hidden execution triggers.
  • Documentation: The lifecycle reference document is purely informative and contains no executable or malicious content.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:08 PM