using-stability-analyzer-ide-plugin

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the plugin source code from the official Skydoves repository on GitHub, which is a verified vendor.- [COMMAND_EXECUTION]: Uses shell commands to clone the plugin repository and read local Gradle configuration files for setup verification.
  • git clone https://github.com/skydoves/compose-stability-analyzer
  • cat ~/.gradle/gradle.properties- [INDIRECT_PROMPT_INJECTION]: Analysis of Kotlin source code presents an attack surface where malicious instructions could be embedded in code comments or strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:30 PM