plugin-creator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and associated Python scripts do not exhibit any malicious patterns.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts for directory creation and JSON manifest management. These operations are limited to development paths like ~/plugins and do not involve unauthorized system commands or shell-based injections.
- [PROMPT_INJECTION]: Analysis of the skill instructions confirms that the automated flags for concealment are false positives; the instructions describe functional UI logic and platform-specific requirements rather than attempts to bypass agent safety or hide malicious actions.
- [DATA_EXFILTRATION]: No evidence of network exfiltration or access to sensitive system credentials (such as SSH keys or environment secrets) was found. The scripts operate exclusively on local plugin metadata and assets.
Audit Metadata