create-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a code generator for plugin scaffolding. It creates a canonical directory layout and populates files such as
plugin.json,SKILL.md, andREADME.mdwith boilerplate content. It also generates asmoke.shscript to perform structural validation of the created plugin. - [COMMAND_EXECUTION]: The skill utilizes filesystem operations to create the plugin's directory structure. These operations are limited to the local project path and are consistent with the skill's stated purpose as a developer tool.
- [EXTERNAL_DOWNLOADS]: The skill uses specific platform tools (
mcp__claude-flow__transfer_*) to perform search operations for existing plugins to prevent naming conflicts. These calls are part of the platform's standard functionality and do not involve untrusted remote code execution.
Audit Metadata