ida-plugin-development

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/hcli-package.py executes the hcli utility via subprocess.run to perform plugin linting and installation. The script correctly uses list-based arguments to prevent command injection.
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides links to official Hex-Rays domains (hex-rays.com) for API documentation and packaging specifications. The packaging script also references the ida-hcli package, which is a standard developer tool for the platform.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:22 PM