Update plugin security warnings to be more direct and actionable
Revise security warning text in plugin installer to use clearer, more direct language about third-party plugin risks. Update plugin scanner note to highlight its threat detection capabilities. Remove example plugin submodule from usr/plugins.
frdel committed
Mar 10, 2026 at 17:04 UTC
2dfad977488aa0b876d4da46b78eb36ba708e97c
3 files changed
+6
-7
plugins/plugin_installer/webui/pluginInstallStore.js
+5
-5
@@ -14,13 +14,13 @@ const PER_PAGE = 20;
14
const SECURITY_WARNING = {
15
title: "Security Warning",
16
message: `
17
- <p><strong>Installing plugins from untrusted sources may pose security risks:</strong></p>
17
+ <p><strong>Plugins from third parties can be a great risk, keep in mind that:</strong></p>
18
<ul style="margin: 0.75em 0; padding-left: 1.5em;">
19
- <li>Malicious code execution</li>
20
- <li>Exposure of sensitive data</li>
21
- <li>System compromise</li>
19
+ <li>You can be hacked the moment you install it</li>
20
+ <li>We can not prevent it or help you</li>
21
+ <li>It is your responsibility</li>
22
</ul>
23
- <p style="margin-top: 0.75em;">Only install plugins from sources you trust.</p>
23
+ <p style="margin-top: 0.75em;">We can never fully guarantee that plugins are safe because there are many ways to obfuscate malicious code.</p>
24
`,
25
type: "warning",
26
confirmText: "Install Anyway",
plugins/plugin_scan/extensions/webui/confirm_dialog_after_render/add-marketplace-scan-action.js
+1
-1
@@ -25,7 +25,7 @@ export default async function addMarketplaceScanAction(context) {
25
if (!bodyElement.querySelector(`.${NOTE_CLASS}`)) {
26
const note = document.createElement("p");
27
note.className = NOTE_CLASS;
28
- note.textContent = "It is always recommended to scan all plugins and updates with A0 itself.";
28
+ note.textContent = "A0 Plugin Scanner can identify most threats. It is always recommended to scan all plugins and updates with A0 itself.";
29
bodyElement.appendChild(note);
30
}
31
usr/plugins/agent0ai__a0_example_plugin
deleted
-1
@@ -1 +0,0 @@
1
-Subproject commit 0c41e09418a13f97bc4dd8f53d7fa9a69383d82f