skills/openai/plugins/plugin-creator/Gen Agent Trust Hub

plugin-creator

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Local Script Execution: The skill involves running a Python script (create_basic_plugin.py) located within the skill's directory to automate the creation of folders and JSON manifest files. This is a standard approach for project scaffolding.
  • File System Operations: The script performs routine file operations such as directory creation and JSON file writing. It includes safety checks, like requiring a force flag to overwrite existing files, which helps prevent accidental data loss.
  • Input Validation and Normalization: User-provided plugin names are normalized (converting to lowercase and replacing non-alphanumeric characters with hyphens) before being used to create directories. This practice helps mitigate potential issues related to unusual characters in file paths.
  • No External Dependencies: The skill relies solely on the Python standard library and does not download or install external packages, minimizing its security footprint.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 01:29 PM