creating-plugins

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructs developers to use official vendor tools for scaffolding and publishing, ensuring a trusted supply chain for plugin development.
  • [SAFE]: Documentation examples consistently demonstrate the use of Zod for schema validation of untrusted input received via API routes and admin interactions.
  • [SAFE]: The platform architecture utilizes a sandboxed execution environment for plugins, restricting access to Node.js built-ins and enforcing resource limits on network and file operations.
  • [SAFE]: The skill defines a granular capability-based permission system, requiring explicit administrator approval for sensitive operations such as unrestricted network access, email delivery, and content modification.
  • [SAFE]: Sensitive configuration data is managed through encrypted secret fields and host-controlled keys, preventing the exposure of credentials in plain text.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 05:34 PM