agent-zero/plugins/_plugin_scan/AGENTS.md
frdel e138e33ca9 Add file-level DOX docs & update AGENTS indexes
Add comprehensive file-level DOX documentation across the repo and update directory AGENTS.md indexes. Many new `*.py.dox.md` files were added under api, helpers, tools, plugins, extensions, webui, and other dirs to document endpoint purpose, ownership, runtime contracts, work guidance, and verification. Several AGENTS.md files were created or updated (agents profiles, api, docker, extensions, helpers, plugins, skills, webui components, etc.) to list child DOX files and clarify documentation/work guidance. Also add example and bundled profile DOX files (agent0, default, developer, hacker, researcher) and minor updates to helpers/dirty_json.py and its tests. These changes improve on-disk documentation coverage and establish the convention that each direct runtime file should have a matching `*.dox.md` describing its contracts and verification steps.
2026-06-08 12:41:53 +02:00

942 B

Plugin Scanner DOX

Purpose

  • Own LLM-guided security scanning for third-party Agent Zero plugins.

Ownership

  • helpers/prompt.py owns scan prompt construction from selectable checks.
  • api/ owns scan queue, start, and synchronous run endpoints.
  • webui/ owns scan checks, prompt template, store, UI, and thumbnail.
  • plugin.yaml and README.md own metadata and behavior notes.

Local Contracts

  • Keep scan prompts explicit about source handling, security categories, and report expectations.
  • Temporary scan contexts must be isolated and cleaned up as intended.
  • Do not install or execute scanned plugin code as part of scanning unless explicitly designed and documented.

Work Guidance

  • Coordinate check schema changes with prompt builder and frontend selection UI.

Verification

  • Smoke-test a synchronous scan and selected-check scan after prompt or API changes.

Child DOX Index

No child DOX files.