The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard system utilities including jq for JSON parsing, find and ls for file discovery and permission checks, and grep for pattern matching. These operations are essential for its function as a validator and are used within a narrow, diagnostic scope.
[COMMAND_EXECUTION]: The helper script scripts/validate_plugin_marketplace.py executes a secondary Python script using subprocess.run(). It passes arguments using a command list rather than a shell string, which is a secure implementation that mitigates command injection risks.
[SAFE]: No evidence of malicious behavior, such as data exfiltration, credential harvesting, or unauthorized remote code execution, was detected. The skill's instructions are focused on adherence to repository-specific standards and security scanning for secrets in third-party plugins.

plugin-validator