plugin-creator

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The static analysis flag in references/evals.yaml corresponds to a security test case within the evaluation suite. It is designed to verify that the agent correctly refuses malicious instructions such as 'Ignore previous instructions'. This is a validation component rather than a vulnerability in the skill's logic.\n- [COMMAND_EXECUTION]: The skill instructs the agent to run local Python scripts and shell commands (e.g., git mv, sync_skills.sh) for project scaffolding and file management. These commands are legitimate for the skill's stated purpose and are scoped to the local development environment.\n- [SAFE]: The skill manages file operations securely, utilizing standard libraries for JSON handling and path normalization. No network activity, hardcoded credentials, or sensitive data access patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 01:13 PM
Security Audit — agent-trust-hub — plugin-creator