skills/mte90/dotfiles/kde-plasmoid/Gen Agent Trust Hub

kde-plasmoid

Warn

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill provides command-line instructions using sudo for administrative tasks, specifically for installing system dependencies via various package managers (pacman, dnf, apt, zypper) and for system-wide deployment of widget packages to the /usr/share/plasma/plasmoids/ directory.
  • [COMMAND_EXECUTION]: The documentation includes several shell commands for common development tasks, such as packaging files using zip, managing Plasma packages with plasmapkg2, testing widgets using plasmoidtest, and restarting the KDE Plasma desktop shell components (kquitapp6, kstart6).
  • [INDIRECT_PROMPT_INJECTION]: A vulnerability surface is identified where untrusted data enters the agent context through the QML UI. Ingestion points: User input from inputField.text in main.qml is passed to the processData slot in backend.py. Boundary markers: Absent. Capability inventory: The backend has access to psutil for system monitoring and the ability to process strings. Sanitization: Absent.
  • [DYNAMIC_EXECUTION]: The skill contains a bash script template that generates a local install.sh file using a here-document (cat > install.sh << 'EOF') and subsequently modifies its permissions to be executable via chmod +x.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 4, 2026, 10:31 PM