generate-ppmplugin-manifest

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [Local File Management]: The skill performs read, write, and validation operations on local files such as manifest.json and native source code (Kotlin, Objective-C). These actions are intended for staging build artifacts and ensuring manifest consistency within a development project.
  • [Sub-skill Orchestration]: The skill utilizes the Skill tool to trigger other local development skills (e.g., build and assembly tools) based on user selection. This is a standard orchestration pattern for complex developer workflows.
  • [Command Execution]: The skill uses standard command-line tools like grep via Bash to extract metadata from source files, such as class names and method signatures. This is used strictly for internal validation and manifest derivation.
  • [No External Connectivity]: The instructions explicitly state that the skill does not require network access, authentication, or package installation, which aligns with its primary purpose as a local pre-flight validation gate.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 05:29 AM
Security Audit — agent-trust-hub — generate-ppmplugin-manifest