skills/ruvnet/ruflo/validate-plugin/Gen Agent Trust Hub

validate-plugin

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard tools like Bash, Read, Glob, and Grep to perform file system operations. These tools are used for the legitimate purpose of verifying that plugin files exist and checking their content against specific validation rules.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves reading and processing user-controlled project files such as plugin.json and various Markdown files. While these files could contain malicious instructions, the skill's logic is limited to structural validation and does not involve executing the content of those files or passing it to unsafe sinks. This is a standard functional surface for a validation utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 03:01 PM
Security Audit — agent-trust-hub — validate-plugin