Plugin Structure
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation defines patterns for executing local bash, Python, and Node.js scripts via plugin hooks, slash commands, and MCP servers. All examples use the ${CLAUDE_PLUGIN_ROOT} environment variable to ensure portable and secure path referencing, avoiding hardcoded absolute paths.
- [SAFE]: No malicious patterns, prompt injections, or data exfiltration attempts were detected. The examples provided (e.g., linting, testing, and Kubernetes operations) are standard development tasks and use placeholders for sensitive information like API keys.
Audit Metadata