install-companion-plugins

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs functional plugins (e.g., transcription, scheduling, email, etc.) from the Claude Code marketplace. These downloads are handled through the platform's official plugin management system.
  • [COMMAND_EXECUTION]: Shell commands are used to interact with the plugin manager (claude plugin install, claude marketplace search). This is the primary function of the skill and is protected by a requirement for user confirmation (AskUserQuestion) before any changes are made to the environment.
  • [SAFE]: The skill incorporates a permission-based workflow that ensures the user is informed of what each plugin unlocks and must manually accept each installation, preventing unauthorized software deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 05:16 AM
Security Audit — agent-trust-hub — install-companion-plugins