asc-plugins

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the management and execution of plugins through shell commands, such as asc plugins install and asc plugins run.
  • [DYNAMIC_EXECUTION]: The plugin protocol is designed around executing arbitrary local binaries or scripts located in the ~/.asc/plugins/ directory. The documentation includes a tutorial demonstrating how to generate and execute a custom bash script.
  • [PRIVILEGE_ESCALATION]: The instructions guide users through using chmod +x to grant necessary execution permissions to their custom-created plugin scripts.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an interface where plugins ingest event data in JSON format via stdin. This creates a surface where event payloads from the CLI tool are processed by local executables.
  • Ingestion points: Event data delivered via stdin to the run executable as described in SKILL.md.
  • Boundary markers: No specific delimiters are defined for the event payload.
  • Capability inventory: The plugins are general-purpose executables capable of network operations (e.g., curl), shell commands, and file system access.
  • Sanitization: The provided bash example utilizes Python's json module to parse incoming data, ensuring it conforms to expected JSON structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 08:43 AM