sync-plugin-cache
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute the systemrsyncutility with the-aand--deleteflags. This mirrors directory contents between build directories and the local plugin cache. The arguments are passed as a list, which is a safe practice against shell injection. - [COMMAND_EXECUTION]: The skill instructs the agent to run local Python scripts (
sync.pyandlist_bundles_and_versions.py) that perform synchronization logic, including verifying file integrity viagitcommand-line tools. - [COMMAND_EXECUTION]: The
sync.pyscript dynamically adjustssys.pathto import local modules from the repository, facilitating the use of shared code within the project monorepo structure.
Audit Metadata