Back to plugin

Security audit

sitemd plugin

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate website-building plugin, but it can install and run a remote sitemd binary, authenticate to sitemd, and modify or deploy websites.

This skill is reasonable for building and deploying sitemd websites. Before installing, be comfortable with downloading the sitemd binary from GitHub, granting sitemd authentication, and letting the agent edit or deploy website content. Confirm destructive or public actions and keep credentials private.

Static analysis

No suspicious patterns detected.