plugin-creator-meta-docs
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context injection syntax (
!command) inSKILL.mdto automatically list available documentation files. - The command
find ${CLAUDE_PLUGIN_ROOT}/docs -name '*.md' -type f | sortexecutes when the skill is loaded to index Markdown files within the plugin's documentation directory. - This implementation is a benign use of shell execution for internal file discovery and does not involve exfiltration, sensitive file access, or unsafe interpolation of user-supplied arguments.
Audit Metadata