dsh-plugin-publisher
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local plugin source code and manifests as input for publishing tasks, creating a potential surface for malicious data. 1. Ingestion points: Plugin repository files and package.json. 2. Boundary markers: Mandatory confirmation of DSH plugin identity and manifest invariants. 3. Capability inventory: Use of pnpm install/build, git push, and dsh CLI for loading. 4. Sanitization: Relies on pre-validation by companion skills and dry-run pack tests.
- [EXTERNAL_DOWNLOADS]: The skill performs dependency installation via pnpm and verification using GitHub repositories. These operations use well-known services and are appropriate for a distribution tool.
Audit Metadata