grafana-plugin-scaffolding
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @grafana/create-plugin@latestto fetch the official scaffolding tool. This is a well-known service from Grafana Labs. - [COMMAND_EXECUTION]: Executes standard development and environment management commands including
npm install,docker compose, andgo mod tidy. These are necessary and expected for plugin development workflows. - [CREDENTIALS_SAFE]: Instructions for plugin signing correctly advise users to store sensitive tokens like
GRAFANA_ACCESS_POLICY_TOKENin environment variables or CI/CD secrets rather than hardcoding them in files.
Audit Metadata