skills/nairon-ai/flux/flux-deps/Gen Agent Trust Hub

flux-deps

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local binary or script named fluxctl and a maintenance script version-check.sh. These are located within the plugin's directory structure (e.g., ~/.claude/plugins/cache/nairon-flux/).
  • [COMMAND_EXECUTION]: Shell commands are used to discover the plugin's installation path and verify the presence of required tools like jq.
  • [DATA_EXPOSURE]: The skill reads project metadata (epics, titles, statuses, and dependencies) from the local .flux/ directory via the fluxctl tool to generate visualization tables.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes epic data (IDs and titles) which could theoretically contain malicious instructions. However, the risk is minimal as the data is formatted into markdown tables and the processing logic is constrained to standard visualization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 04:46 AM