rhdh-plugin-export
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/export-plugin.pyscript usessubprocess.runto execute build and packaging commands such asyarn,npm,podman,docker, andbuildah. This is the intended functionality for an automated build and export tool. - [EXTERNAL_DOWNLOADS]: The skill invokes
npxto download and execute@red-hat-developer-hub/cli@latest. This is a vendor-supplied utility necessary for the plugin export process and is treated as a safe vendor resource. - [DATA_EXFILTRATION]: The skill contains functionality to push artifacts to container registries (
podman push) and npm registries (npm publish). These operations are the final steps of the described export pipeline and are explicitly controlled via command-line arguments and user-provided registry tags.
Audit Metadata