skills/ruvnet/ruflo/create-plugin/Gen Agent Trust Hub

create-plugin

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a code generator for plugin scaffolding. It creates a canonical directory layout and populates files such as plugin.json, SKILL.md, and README.md with boilerplate content. It also generates a smoke.sh script to perform structural validation of the created plugin.
  • [COMMAND_EXECUTION]: The skill utilizes filesystem operations to create the plugin's directory structure. These operations are limited to the local project path and are consistent with the skill's stated purpose as a developer tool.
  • [EXTERNAL_DOWNLOADS]: The skill uses specific platform tools (mcp__claude-flow__transfer_*) to perform search operations for existing plugins to prevent naming conflicts. These calls are part of the platform's standard functionality and do not involve untrusted remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 03:01 PM
Security Audit — agent-trust-hub — create-plugin