plain-install
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the
uvtool to install, remove, and manage packages (e.g.,uv run plain install,uv remove,uv add). - [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of external packages through the
uvpackage manager. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to read documentation from external packages (
uv run plain docs) and execute setup steps described within that documentation. - Ingestion points: Documentation output from
uv run plain docs <package>(SKILL.md). - Boundary markers: None provided to separate documentation content from instructions.
- Capability inventory: Package installation/uninstallation, general file modification capabilities.
- Sanitization: No validation or sanitization of the documentation content is performed before the agent follows its instructions.
Audit Metadata