finalize-step-sync-plugin-cache
Warn
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interpolates the
{plan_id}variable directly into multiple shell commands (Steps 3 and 4). This pattern is vulnerable to command injection if theplan_idinput is not strictly validated or escaped before execution. - [COMMAND_EXECUTION]: The skill executes several local scripts using the
python3interpreter, including.claude/skills/sync-plugin-cache/scripts/sync.pyand.plan/execute-script.py. While these are project-local scripts, they are executed with the full permissions of the agent process. - [COMMAND_EXECUTION]: The skill performs dynamic script regeneration by invoking the
generate_executorcommand on.plan/execute-script.py. This self-modifying behavior updates the execution environment at runtime based on the state of the local cache, which is a security-sensitive operation that could be abused if the source cache content is compromised.
Audit Metadata