creating-plugins
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs developers to use official vendor tools for scaffolding and publishing, ensuring a trusted supply chain for plugin development.
- [SAFE]: Documentation examples consistently demonstrate the use of Zod for schema validation of untrusted input received via API routes and admin interactions.
- [SAFE]: The platform architecture utilizes a sandboxed execution environment for plugins, restricting access to Node.js built-ins and enforcing resource limits on network and file operations.
- [SAFE]: The skill defines a granular capability-based permission system, requiring explicit administrator approval for sensitive operations such as unrestricted network access, email delivery, and content modification.
- [SAFE]: Sensitive configuration data is managed through encrypted secret fields and host-controlled keys, preventing the exposure of credentials in plain text.
Audit Metadata