orderly-plugin-gen
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (
create-plugin.mjs) to automate the creation of project files and directories. This execution is confined to the scaffolding process based on user-provided parameters. - [EXTERNAL_DOWNLOADS]: The generation script fetches package metadata from the official npm registry (
registry.npmjs.org) to ensure the generatedpackage.jsonuses current versions of the author's own SDK packages. This is a standard operation for project initialization tools. - [SAFE]: All generated code templates and configuration files (such as
tsconfig.json,tsup.config.ts, and CI definitions) are transparently defined within the script and align with the stated purpose of providing a development starting point.
Audit Metadata