plugin-parity-drift
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a deterministic version checker that scans local files for specific version tags (
synced-from). It compares these tags against a local cache of installed plugins to report whether the local implementation is up to date. - [COMMAND_EXECUTION]: The skill executes a local script using Node.js (
node scripts/plugin-parity-drift.mjs). The analysis confirms this is a project-local script designed for CI/CD environments to ensure version consistency. The command does not take arbitrary user input or perform network operations. - [DATA_EXPOSURE]: The skill reads local file metadata and plugin manifest files (
plugin.json) to extract version strings. It does not access sensitive credentials, environment variables, or private user data. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill explicitly states it performs no network operations and resolves all data from the local file system.
- [PROMPT_INJECTION]: No prompt injection or behavior override instructions were found. The documentation focus is purely technical and instructional regarding the versioning grammar and CI integration.
Audit Metadata