creating-a-plugin
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEOBFUSCATION
Full Analysis
- [OBFUSCATION]: The Directory Structure section includes non-printable control characters and null bytes (U+001C, U+0002, U+0014, U+0000). These appear to be artifacts of binary-to-text conversion for directory visualization rather than malicious obfuscation, as they do not hide executable content or instructions.\n- [SAFE]: The skill provides examples of manifest files and command templates that include placeholders for environment variables (e.g., ${API_KEY}). These are documented as standard practices for plugin development and do not expose actual secrets or credentials.\n- [SAFE]: References to powerful tools such as Bash and npx are provided within the context of developer documentation for the Claude Code platform and represent intended functionality for plugin authors.\n- [SAFE]: All external URLs for schemas and documentation point to official domains associated with the Claude platform (anthropic.com, claude.com), which are recognized as trusted sources.
Audit Metadata