create-uploader-plugin
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes PowerShell (
new-uploader-plugin.ps1) and Bash (new-uploader-plugin.sh) scripts that use thedotnet slncommand to register generated plugin projects within the main solution file. The instructions also guide the AI agent to verify the new plugin by runningdotnet build. These are expected operations for the intended development workflow. - [DATA_EXFILTRATION]: The skill templates for uploader configuration models and viewmodels implement a secure pattern using an
ISecretStoreinterface. This ensures that sensitive information, such as API tokens, is handled through a dedicated secure storage mechanism and is not persisted in plain-text JSON settings files. - [REMOTE_CODE_EXECUTION]: The skill generates C# source code from local templates and facilitates its compilation using the system's standard compiler. There are no patterns of downloading and executing remote scripts or binary content from untrusted sources.
Audit Metadata