intellij-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to process external project files, which creates a surface for indirect prompt injection where malicious instructions could be embedded in source code or configuration files.
- Ingestion points: Processes
plugin.xml, Gradle build scripts, and Kotlin/Java source code files from the user's project environment. - Boundary markers: Lacks explicit boundary markers or instructions for the agent to distinguish between data and instructions within the project files.
- Capability inventory: Provides the ability to execute code via the
runIdeGradle task and perform network operations for plugin publishing. - Sanitization: Does not specify methods for sanitizing or validating the content of the project files before processing.
Audit Metadata