Security audit
sitemd plugin
Security checks across malware telemetry and agentic risk
Overview
This appears to be a legitimate website-building plugin, but it can install and run a remote sitemd binary, authenticate to sitemd, and modify or deploy websites.
This skill is reasonable for building and deploying sitemd websites. Before installing, be comfortable with downloading the sitemd binary from GitHub, granting sitemd authentication, and letting the agent edit or deploy website content. Confirm destructive or public actions and keep credentials private.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.