plugin-dev-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a standard workflow for developing and validating plugins within a specific repository structure.
- [SAFE]: All commands provided (e.g., npx markdownlint, shellcheck, ruby -c, pytest) are standard development tools used for linting and testing code.
- [SAFE]: No evidence of malicious intent, prompt injection, or data exfiltration was detected.
- [SAFE]: The skill uses local paths and standard environment variables like CLAUDE_SKILL_DIR correctly for repository-relative operations.
- [SAFE]: Validation steps involving make targets such as 'make security-injection' appear to be part of a legitimate security evaluation suite for the project's own codebase.
Audit Metadata