flux-deps
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local binary or script named
fluxctland a maintenance scriptversion-check.sh. These are located within the plugin's directory structure (e.g.,~/.claude/plugins/cache/nairon-flux/). - [COMMAND_EXECUTION]: Shell commands are used to discover the plugin's installation path and verify the presence of required tools like
jq. - [DATA_EXPOSURE]: The skill reads project metadata (epics, titles, statuses, and dependencies) from the local
.flux/directory via thefluxctltool to generate visualization tables. - [INDIRECT_PROMPT_INJECTION]: The skill processes epic data (IDs and titles) which could theoretically contain malicious instructions. However, the risk is minimal as the data is formatted into markdown tables and the processing logic is constrained to standard visualization.
Audit Metadata