Plugin Structure
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a structural guide and documentation resource for plugin development. All identified patterns involve standard configuration templates and best practices for creating AI agent extensions.
- [SAFE]: Examples provided within the skill (such as MCP server configurations and hook scripts) use environment variable placeholders (e.g.,
${API_KEY},${GITHUB_TOKEN}) rather than hardcoded credentials. - [SAFE]: The skill emphasizes the use of
${CLAUDE_PLUGIN_ROOT}for portable path references, preventing hardcoded absolute paths that could lead to file system vulnerabilities. - [SAFE]: Command execution patterns found in the examples (e.g., running linters like ESLint or Pylint) are standard for the described development workflow and do not involve unauthorized privilege escalation or remote code execution from unknown sources.
Audit Metadata