Skills plugin-scanner
📦

plugin-scanner

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Scan AI Plugins Before Installation

Unreviewed agent extensions can contain prompt injection, unsafe commands, secret exposure, or supply-chain risks. This skill guides local scanning and clear interpretation before trust.

Supports: Claude Codex Code(CC)
📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "plugin-scanner" from https://skillstore.io/skills/hashgraph-online-plugin-scanner.md and its manifest at https://skillstore.io/api/skills/hashgraph-online-plugin-scanner/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/hashgraph-online-plugin-scanner.md Signed manifest GET /api/skills/hashgraph-online-plugin-scanner/manifest Signed lockfile GET /api/skills/hashgraph-online-plugin-scanner/lockfile

Test it

Using "plugin-scanner". Scan the skill at ./skills/calendar-helper before installation.

Expected outcome:

The scan found one high-severity prompt-injection rule in SKILL.md. Review the cited instruction and remove the override language before installation.

Using "plugin-scanner". Verify the MCP server in ./integrations/search-server.

Expected outcome:

  • Structure validation passed.
  • The scan found a medium-severity command-execution pattern in the startup script.
  • Review the cited command arguments and dependency source before use.

Using "plugin-scanner". Check ./plugins/reporter and tell me whether it is safe.

Expected outcome:

No covered issue was detected by the current scan. This result is limited to supported rules and does not guarantee safety.

Security Audit

Medium Risk
v1 • 8/27/2026 Open versioned report

All 21 static findings are false positives caused by Markdown formatting, safety prohibitions, or documentation links. The workflow does present one real supply-chain risk because it proposes installing an unpinned package from PyPI. No prompt injection or secret-access intent was found.

1
Files scanned
96
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:40-44
Unpinned Third-Party Package Installation
The workflow proposes installing plugin-scanner from PyPI after approval. A compromised or replaced package could execute installation code within the isolated environment.
Lines 40-44 directly instruct pipx installation without a version pin or provenance check, while requiring user approval and isolation.

Risk Factors

⚙️ External commands (16)
SKILL.md:9 SKILL.md:11 SKILL.md:17 SKILL.md:27 SKILL.md:30 SKILL.md:36-38 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42-44 SKILL.md:44-46 SKILL.md:46 SKILL.md:52-54 SKILL.md:54-58 SKILL.md:58-60 SKILL.md:60-64 SKILL.md:64-67
🌐 Network access (3)
SKILL.md:93 SKILL.md:94 SKILL.md:95
Audited by: codex
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/hashgraph-online-plugin-scanner/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/hashgraph-online-plugin-scanner/security.svg)](https://skillstore.io/skills/hashgraph-online-plugin-scanner?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/hashgraph-online-plugin-scanner?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/hashgraph-online-plugin-scanner/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/hashgraph-online-plugin-scanner.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

hashgraph-online. (2026). plugin-scanner security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/hashgraph-online-plugin-scanner/audits/1

BibTeX citation

@techreport{hashgraph-online-hashgraph-online-plugin-scanner-2026, author = {hashgraph-online}, title = {plugin-scanner security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/hashgraph-online-plugin-scanner/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "plugin-scanner security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "hashgraph-online" date-released: "2026-08-27" url: "https://skillstore.io/skills/hashgraph-online-plugin-scanner/audits/1" identifiers: - type: other value: "skillstore:hashgraph-online-plugin-scanner:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Review a Skill Before Installation

Scan a local skill directory and summarize security findings before adding it to an agent environment.

Audit an MCP Integration

Inspect an MCP server repository for prompt injection, command execution, credential exposure, and suspicious installation behavior.

Validate a Marketplace Submission

Run scan, lint, and verification checks before publishing an agent plugin or skill.

Try These Prompts

Scan a Local Skill 
Scan [PATH] as an agent skill and summarize the highest severity finding, affected files, and recommended action.
Inspect an MCP Server 
Audit the MCP server at [PATH] for prompt injection, secret exposure, unsafe commands, and suspicious installation behavior.
Prepare a Publication Review 
Scan, lint, and verify [PATH], then report structural failures, security findings, and publication blockers.
Compare Scan Evidence 
Analyze the machine-readable scan of [PATH], group evidence by risk category, and prioritize remediation without claiming the target is safe.

Best Practices

  • Scan the narrowest local path that contains the requested target.
  • Review cited files and rules before accepting or dismissing each finding.
  • Describe clean results as no covered issue detected, not as proof of safety.

Avoid

  • Do not execute target code, install scripts, or lifecycle hooks during scanning.
  • Do not read environment files, credential stores, private keys, or unrelated secrets.
  • Do not install plugin-scanner or change Python environments without user approval.

Frequently Asked Questions

What can this skill scan?
It guides scans of agent skills, plugins, MCP servers, agent packages, and repositories available through a local path.
Does scanning execute the target?
No. The workflow explicitly avoids running target code, install scripts, lifecycle hooks, and arbitrary target commands.
Is Guard Cloud required?
No. The documented scanner runs locally and does not require Guard Cloud.
Is plugin-scanner included with hol-guard?
No. The skill states that plugin-scanner is a separate Python distribution and command.
Does a clean result prove the target is safe?
No. A clean result means the current scanner found no issue covered by its active rules.
Can the skill install the scanner automatically?
It must ask for approval first. The documented installation uses pipx to isolate the CLI environment.

Developer Details

License

Apache-2.0

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/hashgraph-online/hol-guard-plugin/tree/b5f2a14c7c2fc53a7f1664d56e122696228ca377/skills/plugin-scanner

Ref

40175672d649fa6482bff53a7acf4ecdd6a04a96

Maintenance freshness

8/27/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md