shreyasudupi

GitHub profile1 plugin in the catalog

Plugins by shreyasudupi

1 plugins by shreyasudupi in the catalog, most-starred first.

shreyasudupidetonatorDynamic sandbox for plugins you did not write. After you approve the run, /detonate fetches a plugin at an exact commit and loads it inside a disposable Docker container (no network, read-only, non-root, all capabilities dropped) with a throwaway Hermes home full of decoy keys, then drives its hooks and tools and reports what it actually did: decoy secrets read, network attempts, shell commands, persistence, prompt injection, tool poisoning, monkeypatching. Deterministic rules with a plain-language reason and MITRE ATT&CK / ATLAS IDs per finding; advisory only, a clean run is evidence, not proof. Disclosure — requires Docker; runs git (fetches the target repo over the network) and docker (one-time image build pulls a digest-pinned python:3.11-slim) on your machine, only after you approve each run; refuses to run unattended; writes reports under its own plugin-data folder; never reads your real keys or Hermes credentials.Communitytools