commandkit-plugin-development
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and helper scripts for scaffolding plugin code. The tools
tools/generate-compiler-plugin-template.mjsandtools/generate-runtime-plugin-template.mjsoutput static template strings to the console and do not execute external input. - [PROMPT_INJECTION]: A documentation example in
references/04-template-registration.mddescribes an architectural pattern for template generation that represents an indirect prompt injection surface. This is a technical finding regarding the guidance provided, not the skill's own execution logic: - Ingestion points: The
argsarray passed to theregisterTemplatecallback inreferences/04-template-registration.md. - Boundary markers: Absent in the example implementation.
- Capability inventory: Filesystem write access using
node:fs/promiseswithin the registration callback. - Sanitization: No path validation or input escaping is shown in the reference example.
Audit Metadata