---
title: "code-safety"
description: "trigger: secrets, eval/exec, unsanitized SQL, hallucinated dependencies. avoid: committing credentials, adding unverified packages, executing dynamic code. Install scan-secrets for the enforced counterpart of the secret "
canonical: https://agentpluginsdirectory.com/plugins/code-safety--open-coder-ai-org
last-updated: 2026-09-08
---

# code-safety
trigger: secrets, eval/exec, unsanitized SQL, hallucinated dependencies. avoid: committing credentials, adding unverified packages, executing dynamic code. Install scan-secrets for the enforced counterpart of the secret slice (a commit-time gate), and verify-dependency-exists for the dependency slice (opt-in: disabled by default, needs a curated allowlist); the eval/exec and unsanitized-SQL guidance stays advisory (no diff-time gate can decide whether dynamic execution or a query string is unsafe).
- Slug: code-safety--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: .agents/policies/code-safety/plugin.json
- Version: 0.0.2
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (code-safety)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/code-safety--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json