forguncy-plugin-expert

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides automation scripts, such as scripts/init_project.ps1 and scripts/update_references.ps1, which are used to initialize plugin projects and update .NET project references. These actions are transparent and directly support the development workflow described in the skill.
  • [EXTERNAL_DOWNLOADS]: Documentation and scripts reference the installation of standard development dependencies and tools via official package managers (NuGet, NPM, PyPI). Examples include the GrapeCity.Forguncy.PluginCreator dotnet tool, and libraries like Pillow, antd, and element-plus.
  • [PROMPT_INJECTION]: A thorough review of the skill's instructions and documentation found no patterns of prompt injection, role-play overrides, or attempts to bypass agent safety protocols.
  • [DATA_EXFILTRATION]: No unauthorized data collection or exfiltration behavior was detected. The skill uses a local cache file (.forguncy-path-cache.json) to store the Forguncy installation path for user convenience, which is standard behavior for development environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 08:21 AM
Security Audit — agent-trust-hub — forguncy-plugin-expert