create-moviepilot-plugin
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a clear and legitimate scope for plugin development and maintenance within the MoviePilot ecosystem. It provides comprehensive implementation skeletons and architectural requirements that align with standard software development practices.
- [COMMAND_EXECUTION]: The instructions permit the use of shell commands for validation, diagnostics, and code search. Security is addressed by explicitly forbidding the use of shell redirection to circumvent file-tool permissions and recommending the use of narrow search globs to limit exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user input to generate plugin code, which is a standard feature for this type of assistant. It mitigates injection risks by using a 'UI Mode Selection Gate' to force user confirmation on implementation details and requiring the agent to cross-reference requests with existing host documentation and source code.
- [EXTERNAL_DOWNLOADS]: The skill utilizes web browsing tools to consult official documentation for API verification and dependency checks. This is a recommended practice to ensure that generated code adheres to actual project requirements rather than relying on potentially outdated model training data.
Audit Metadata