vrr/agent-zero
2
0
Fork 0
mirror of https://github.com/agent0ai/agent-zero.git synced 2026-05-19 16:31:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update plugin security warnings to be more direct and actionable

Browse source 
Revise security warning text in plugin installer to use clearer, more direct language about third-party plugin risks. Update plugin scanner note to highlight its threat detection capabilities. Remove example plugin submodule from usr/plugins.
This commit is contained in:
frdel 2026-03-10 17:04:58 +01:00
parent 5579a3c9e5
commit 2dfad97748
3 changed files with 6 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

10
plugins/plugin_installer/webui/pluginInstallStore.js
View file

@ -14,13 +14,13 @@ const PER_PAGE = 20;
const SECURITY_WARNING = {
title: "Security Warning",
message: `
<p><strong>Installing plugins from untrusted sources may pose security risks:</strong></p>
<p><strong>Plugins from third parties can be a great risk, keep in mind that:</strong></p>
<ul style="margin: 0.75em 0; padding-left: 1.5em;">
<li>Malicious code execution</li>
<li>Exposure of sensitive data</li>
<li>System compromise</li>
<li>You can be hacked the moment you install it</li>
<li>We can not prevent it or help you</li>
<li>It is your responsibility</li>
</ul>
<p style="margin-top: 0.75em;">Only install plugins from sources you trust.</p>
<p style="margin-top: 0.75em;">We can never fully guarantee that plugins are safe because there are many ways to obfuscate malicious code.</p>
`,
type: "warning",
confirmText: "Install Anyway",

2
plugins/plugin_scan/extensions/webui/confirm_dialog_after_render/add-marketplace-scan-action.js
View file

@ -25,7 +25,7 @@ export default async function addMarketplaceScanAction(context) {
if (!bodyElement.querySelector(`.${NOTE_CLASS}`)) {
const note = document.createElement("p");
note.className = NOTE_CLASS;
note.textContent = "It is always recommended to scan all plugins and updates with A0 itself.";
note.textContent = "A0 Plugin Scanner can identify most threats. It is always recommended to scan all plugins and updates with A0 itself.";
bodyElement.appendChild(note);
}

1
usr/plugins/agent0ai__a0_example_plugin

@ -1 +0,0 @@
Subproject commit 0c41e09418a13f97bc4dd8f53d7fa9a69383d82f