plugin-settings
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional documentation on organizing configuration scopes (user, project, managed) and metadata without including any malicious scripts or command execution.
- [SAFE]: Includes explicit security hardening guidance, advising developers to use platform-native secure credential storage instead of plain text files and to avoid shell-form command interpolation to mitigate injection risks.
- [SAFE]: References official documentation from 'code.claude.com' and standard configuration schemas from 'json.schemastore.org' for validation purposes.
- [SAFE]: Mentions 'bopen.ai' as a trusted destination for skill interfaces, which is consistent with the skill's authorship by 'b-open-io'.
Audit Metadata