setup
Warn
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local shell script from a path derived from environment variables:
$PLUGIN_DIR/scripts/install-dependencies.sh. This script is used for platform detection, tool checking, and installation. - [COMMAND_EXECUTION]: Modifies shell startup configuration files (
~/.bashrcand~/.zshrc) by appendingexport PATHcommands to ensure globally installed Node.js binaries are available in future sessions. - [EXTERNAL_DOWNLOADS]: Fetches and installs multiple development tools including
uv,gh,prettier,cpanm,graph-easy,ruff,semgrep,jscpd,gitleaks,node, anddopplerusing various package managers likebrew,npm,cpanm, andmise. - [REMOTE_CODE_EXECUTION]: Utilizes
npxto dynamically download and execute thesemantic-releasepackage directly from the npm registry.
Audit Metadata