make-dsh-plugin

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the user to install plugin packages from external sources including the NPM registry and GitHub repositories, which is standard for the documented development workflow.
  • [REMOTE_CODE_EXECUTION]: Instructions describe how to configure the allowBuilds setting in pnpm-workspace.yaml to permit lifecycle scripts to run during package installation. The documentation explicitly warns the user that this allows code to execute on the host machine outside the agent's sandbox.
  • [COMMAND_EXECUTION]: The skill provides various command-line instructions for environment discovery, directory linking, plugin installation, and using the GitHub CLI to publish discussions and query repository metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 10:15 AM