plugin-dev-usage
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax inSKILL.mdto runplugin-dev versionandplugin-dev statusat load time. These commands provide the agent with the current state of the local development environment and are benign in this context. - [INDIRECT_PROMPT_INJECTION]: The skill ingests output from local development scripts into the agent's context. The source of this data is a local script (
plugin-dev) managed by the user, which is a standard pattern for development-oriented skills and poses minimal risk.
Audit Metadata