Plugin Audit Log
This page publishes each release's effective classification under the current policy and keeps any older stored verdict visible when the two disagree. It lists rule IDs only; private evidence and file contents are never published.
What the tiers mean
BLOCK means a deterministic structural fact such as a malware signature, archive traversal, a setuid bit, or a zip bomb, with no innocent explanation. It is the only tier that can remove a release.
MANUAL_REVIEW means a human should look; it does not mean the plugin is dangerous. Most Decky plugins trip these rules because SteamOS has a read-only root and useful plugins often need sudo, mount, or systemctl.
PASS_WITH_WARNINGS means nothing needed review, but the scanner recorded rules worth knowing about before installing.
AUDIT_ERROR means the release could not be audited — usually the artifact could not be fetched or read. It is not a finding about the plugin, and it is not a pass.
Passing does not prove a plugin is safe. An automated audit can miss harmful behavior.
Current policy
Loading the current policy.
Audited releases
Loading audited releases.
The audit log could not be loaded. The published record is available at audit.json.