elizaos-plugin-developer
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches source code snapshots and type definitions from the official
elizaOS/elizaGitHub repository using the GitHub CLI/API for reference purposes during development. - [COMMAND_EXECUTION]: Instructions include the execution of standard project-local development commands such as
bun run build,bun run test, andbun run typecheck. The skill emphasizes requesting user approval before performing installations, migrations, or any credentialed execution. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from local project files, including READMEs, package manifests, and external source code. This creates a surface for indirect prompt injection. To mitigate this, the skill includes explicit instructions to avoid silent upgrades, verify boundaries, and keep sensitive character authoring separate from the plugin logic.
Audit Metadata