asc-plugins
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the management and execution of plugins through shell commands, such as
asc plugins installandasc plugins run. - [DYNAMIC_EXECUTION]: The plugin protocol is designed around executing arbitrary local binaries or scripts located in the
~/.asc/plugins/directory. The documentation includes a tutorial demonstrating how to generate and execute a custom bash script. - [PRIVILEGE_ESCALATION]: The instructions guide users through using
chmod +xto grant necessary execution permissions to their custom-created plugin scripts. - [INDIRECT_PROMPT_INJECTION]: The skill defines an interface where plugins ingest event data in JSON format via stdin. This creates a surface where event payloads from the CLI tool are processed by local executables.
- Ingestion points: Event data delivered via stdin to the
runexecutable as described in SKILL.md. - Boundary markers: No specific delimiters are defined for the event payload.
- Capability inventory: The plugins are general-purpose executables capable of network operations (e.g.,
curl), shell commands, and file system access. - Sanitization: The provided bash example utilizes Python's
jsonmodule to parse incoming data, ensuring it conforms to expected JSON structures.
Audit Metadata