Security audit
Security checks across malware telemetry and agentic risk
This plugin provides disclosed, bounded AI coding and project-governance workflows with project-local write limits and explicit stop conditions.
Install only if you want an agent that can proactively edit and test files inside your project. Review the active packet/write scope before using autonomous loops, and do not grant production credentials, account sessions, paid resources, or destructive Git operations unless you explicitly intend to handle those decisions outside the skill's normal bounds.
SkillSpector was not run because this plugin release contains no bundled skills.
62/62 vendors flagged this plugin as clean.
Detected: suspicious.dangerous_exec
const execution = spawnSync(process.execPath, [script, "--workspace", root, "--json", ...extra], {