Skills
Navigate
skills/davila7/claude-code-templates/plugin-forge/Gen Agent Trust Hub

plugin-forge

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides utility scripts scripts/create_plugin.py and scripts/bump_version.py intended for local execution. These scripts perform routine filesystem tasks such as directory creation and file updates (JSON and Markdown).
  • [INDIRECT_PROMPT_INJECTION]: The skill manages and parses plugin.json and marketplace.json files. This creates a data ingestion surface. Ingestion points: The scripts read existing manifest files from the local filesystem. Boundary markers: None. Capability inventory: Filesystem writes and directory creation via standard Python libraries. Sanitization: The scripts use standard JSON serialization and deserialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 12:02 PM