plugin-create
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a scaffolding tool for marketplace development, automating the creation of component files using predefined templates. No malicious patterns or unauthorized behaviors were found during the analysis.
- [EXTERNAL_DOWNLOADS]: All scripts and templates are part of the skill package. The skill does not perform any remote downloads or execute code from external sources.
- [DATA_EXFILTRATION]: The skill uses standard file system operations for local component management. No hardcoded credentials, unauthorized file access, or network exfiltration patterns were identified.
- [PROMPT_INJECTION]: The skill ingests user input through an interactive questionnaire to populate component metadata. While this creates a surface for indirect injection, the skill implements basic sanitization by quoting string values in the generated YAML frontmatter, and no attempts to bypass safety filters were found in the instructions.
Audit Metadata