halo-plugin-dev
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions explicitly direct the agent to follow secure coding practices. This includes storing sensitive tokens and keys in secure 'Secret' resources rather than configuration files, and performing SSRF validation on outbound requests.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the project's official site at
docs.halo.run. This is standard behavior for maintaining up-to-date integration with the platform's APIs. - [INDIRECT_PROMPT_INJECTION]: The skill allows the agent to ingest external documentation files. This functionality is intended for fetching technical specifications from the official documentation index, providing the agent with current context for plugin development.
Audit Metadata