validate-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard tools like Bash, Read, Glob, and Grep to perform file system operations. These tools are used for the legitimate purpose of verifying that plugin files exist and checking their content against specific validation rules.
- [INDIRECT_PROMPT_INJECTION]: The skill involves reading and processing user-controlled project files such as
plugin.jsonand various Markdown files. While these files could contain malicious instructions, the skill's logic is limited to structural validation and does not involve executing the content of those files or passing it to unsafe sinks. This is a standard functional surface for a validation utility.
Audit Metadata