Security audit
Termin zadawania pyta PZP
Security checks for vulnerabilities and agentic risk
Overview
The plugin's code and runtime instructions match its stated purpose (a PZP question-deadline calculator); there are no network calls, required credentials, or risky install steps.
This plugin appears to be what it says: a local date calculator for PZP question deadlines. Before installing, note: (1) holidays are hard-coded for 2026 only — results for other years may be incorrect; (2) SKILL.md references ZnajdzPrzetargi.pl but the code does not access that site (there are no network calls), so the mention is informational only; (3) the plugin requires no credentials and has no install-time downloads, lowering risk; (4) the plugin can be invoked autonomously by agents by default — if you prefer manual control, restrict plugins or tool invocation in your gateway/tool policy. If you need multi-year support or a different holiday set, review/modify dateUtils.ts before using in production and test with sample dates.
Static analysis
No suspicious patterns detected.
