mirror of
https://github.com/agent0ai/agent-zero.git
synced 2026-04-28 11:40:47 +00:00
Ensure printed output and HTML logs are safe by importing and applying sanitize_string, opening log files with utf-8 and errors='replace', and sanitizing text before writing. Add tests to verify lone surrogate characters are replaced and that logging won't crash on invalid Unicode. In the plugin installer UI, introduce POPULAR_PLUGIN_MIN_STARS and centralize popularity checking in _isPopularPlugin, using it for filtering and counts. |
||
|---|---|---|
| .. | ||
| api | ||
| extensions/webui | ||
| helpers | ||
| webui | ||
| plugin.yaml | ||
| README.md | ||
Plugin Installer
Install and update Agent Zero plugins from ZIP uploads, Git repositories, or the community Plugin Index surfaced through the Plugin Hub.
What It Does
This plugin provides the built-in installation workflow for third-party plugins. It validates plugin manifests, prevents naming conflicts, installs plugins into usr/plugins/, optionally updates Git-based plugins, and exposes a UI for browsing and installing community plugins.
Main Behavior
- ZIP install
- Accepts an uploaded archive, extracts it safely, locates
plugin.yaml, validates metadata, and moves the plugin intousr/plugins/.
- Accepts an uploaded archive, extracts it safely, locates
- Git install
- Clones a repository to a temporary directory, validates the plugin, then installs it into
usr/plugins/.
- Clones a repository to a temporary directory, validates the plugin, then installs it into
- Plugin update
- Updates already installed Git-backed custom plugins and re-runs installation hooks.
- Safety checks
- Rejects archives with unsafe paths.
- Rejects missing or invalid
plugin.yamlfiles. - Rejects plugin name conflicts.
- Install hooks and refresh
- Runs the plugin install hook when present and calls
after_plugin_change(...)so the app refreshes plugin state.
- Runs the plugin install hook when present and calls
- Plugin Hub UI
- The web UI store handles browsing Plugin Index entries, showing README content, prompting about third-party plugin risk, and launching install/update actions.
Key Files
- API
api/plugin_install.pydispatches install, update, and index fetch actions.
- Installer logic
helpers/install.pycontains archive extraction, Git install, update, validation, and hook execution.
- Frontend
webui/pluginInstallStore.jsmanages the installer modal state and community index interactions.
Configuration Scope
- Settings sections: none
- Always enabled:
true
Plugin Metadata
- Name:
_plugin_installer - Title:
Plugin Installer - Description: Install plugins from ZIP files, Git repositories, or the community index.