plugin-creator-meta-docs

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context injection syntax (!command) in SKILL.md to automatically list available documentation files.
  • The command find ${CLAUDE_PLUGIN_ROOT}/docs -name '*.md' -type f | sort executes when the skill is loaded to index Markdown files within the plugin's documentation directory.
  • This implementation is a benign use of shell execution for internal file discovery and does not involve exfiltration, sensitive file access, or unsafe interpolation of user-supplied arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 10:27 AM