kde-plasmoid
Warn
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides command-line instructions using
sudofor administrative tasks, specifically for installing system dependencies via various package managers (pacman,dnf,apt,zypper) and for system-wide deployment of widget packages to the/usr/share/plasma/plasmoids/directory. - [COMMAND_EXECUTION]: The documentation includes several shell commands for common development tasks, such as packaging files using
zip, managing Plasma packages withplasmapkg2, testing widgets usingplasmoidtest, and restarting the KDE Plasma desktop shell components (kquitapp6,kstart6). - [INDIRECT_PROMPT_INJECTION]: A vulnerability surface is identified where untrusted data enters the agent context through the QML UI. Ingestion points: User input from
inputField.textinmain.qmlis passed to theprocessDataslot inbackend.py. Boundary markers: Absent. Capability inventory: The backend has access topsutilfor system monitoring and the ability to process strings. Sanitization: Absent. - [DYNAMIC_EXECUTION]: The skill contains a bash script template that generates a local
install.shfile using a here-document (cat > install.sh << 'EOF') and subsequently modifies its permissions to be executable viachmod +x.
Audit Metadata