plugin-test

No clear evidence of stealthy malware (e.g., hardcoded credential theft, reverse shell, or outbound exfiltration) is visible in this fragment. However, the module is security-relevant because it performs high-privilege orchestration: it installs global npm packages (supply-chain surface), installs a plugin from a caller-provided path, executes an optional probe command from configuration (potential arbitrary command execution depending on runner spawning semantics), and persists captured stdout/stderr to disk (possible secret leakage). If config/probe/plugin inputs are not strictly trusted and if subprocess spawning is not hardened, the overall security risk is moderate to high.