forguncy-plugin-expert
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
RunCommandcapability to execute local PowerShell and Python scripts within thescripts/directory (e.g.,init_project.ps1andgenerate_logo.py) to automate project initialization and asset generation tasks. - [PROMPT_INJECTION]: The
SKILL.mdinstructions include explicit safety constraints, such as the 'Environment Repair Protocol,' which requires the agent to request installation paths from the user rather than attempting to scan the host filesystem. - [REMOTE_CODE_EXECUTION]: The skill is designed to generate C# and JavaScript source code based on developer requirements and provided templates, which is the primary function of the expert agent.
- [DATA_EXPOSURE]: Documentation within the skill, such as
SDK_BestPractices.mdandOther_Database_Interaction.md, explicitly promotes secure data handling by mandating the use of parameterized queries for all database operations.
Audit Metadata