create-plugin-scaffold
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to create directories and files in the local filesystem, specifically under
~/.cursor/plugins/local/. This is the intended purpose of the scaffolding tool and follows standard project generation patterns. - [SAFE]: There are no findings related to data exfiltration, credential harvesting, or remote code execution. The skill explicitly includes a guardrail to ensure all manifest paths are relative and do not allow parent traversal, which is a positive security practice.
Audit Metadata