Security audit
sitemd plugin
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a legitimate website-building plugin, but it can install and run a remote sitemd binary, authenticate to sitemd, and modify or deploy websites.
This skill is reasonable for building and deploying sitemd websites. Before installing, be comfortable with downloading the sitemd binary from GitHub, granting sitemd authentication, and letting the agent edit or deploy website content. Confirm destructive or public actions and keep credentials private.
Static analysis
No suspicious patterns detected.
