create-arc1-extension
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides standard development shell commands for the user to build and test their own extension code, including
npm install,npm link, andnpm run build. - [COMMAND_EXECUTION]: Documents the use of administrative security gates (environment variables like
SAP_ALLOW_PLUGIN_EXECUTEandSAP_ALLOW_PLUGIN_RAW_WRITES) required to enable high-privilege operations such as ABAP console class execution or direct database writes. - [DYNAMIC_EXECUTION]: Describes the platform's intended mechanism for dynamically loading local JavaScript plugins via the
ARC1_PLUGINSenvironment variable during server startup. - [EXTERNAL_DOWNLOADS]: References external sample repositories and documentation (e.g.,
github.com/arc-mcp/arc-1-extension-sample) as technical references for developers following the guide.
Audit Metadata