package-ida-plugin

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a developer guide for the IDA Pro plugin ecosystem. It provides documentation on the ida-plugin.json manifest and standard directory structures.
  • [SAFE]: All external references point to official vendor domains (hex-rays.com), the author's official GitHub repositories (HexRaysSA), or well-known industry tools (mandiant/capa).
  • [SAFE]: Commands described, such as hcli plugin lint and hcli plugin install, are part of the intended developer workflow for the official Hex-Rays Plugin Manager.
  • [SAFE]: No hardcoded credentials, malicious remote code execution patterns, or persistence mechanisms were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 06:15 AM
Security Audit — agent-trust-hub — package-ida-plugin