rhdh-plugin-export

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/export-plugin.py script uses subprocess.run to execute build and packaging commands such as yarn, npm, podman, docker, and buildah. This is the intended functionality for an automated build and export tool.
  • [EXTERNAL_DOWNLOADS]: The skill invokes npx to download and execute @red-hat-developer-hub/cli@latest. This is a vendor-supplied utility necessary for the plugin export process and is treated as a safe vendor resource.
  • [DATA_EXFILTRATION]: The skill contains functionality to push artifacts to container registries (podman push) and npm registries (npm publish). These operations are the final steps of the described export pipeline and are explicitly controlled via command-line arguments and user-provided registry tags.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 03:30 PM
Security Audit — agent-trust-hub — rhdh-plugin-export