maintain-plugins
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The scripts
plugin_bootstrap.pyandsync_with_inventory.pyutilize thesubprocessmodule to execute system commands such asgit cloneandgit pull, as well as internal Python components like the bridge installer. These operations are necessary for managing the plugin lifecycle and synchronizing the local environment with the vendor source.- [EXTERNAL_DOWNLOADS]: Theplugin_bootstrap.pyscript facilitates the downloading of plugin resources fromhttps://github.com/richfrem/agent-plugins-skills.git. This activity is part of the core functionality to keep the ecosystem updated and targets the vendor's official repository.
Audit Metadata