meta-plugin-creator

SUSPICIOUS: the core skill is mostly benign documentation for plugin creation, and the scanner’s command-injection hits are largely false positives from markdown examples. The main real risk is proportionality/trust: it encourages transitive installation of another third-party skill and documents plugin patterns that can auto-execute hooks or third-party MCP/LSP tools, expanding the agent’s trust boundary beyond simple manifest authoring.