code-plugin-architecture

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill content consists of architectural guidelines and evaluation cases. No signs of prompt injection, data exfiltration, or obfuscation were detected.
  • [SAFE]: All external URLs point to official developer documentation for React and Next.js, which are recognized as well-known and trusted services.
  • [NO_CODE]: No executable code, shell scripts, or third-party dependencies are included in the skill package.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing plugin-based logic. It explicitly addresses security by recommending contract validation, runtime input checks, and proper resource disposal, which helps users avoid common injection vulnerabilities in their own implementations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 01:34 PM