make-dsh-plugin
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install plugin packages from external sources including the NPM registry and GitHub repositories, which is standard for the documented development workflow.
- [REMOTE_CODE_EXECUTION]: Instructions describe how to configure the
allowBuildssetting inpnpm-workspace.yamlto permit lifecycle scripts to run during package installation. The documentation explicitly warns the user that this allows code to execute on the host machine outside the agent's sandbox. - [COMMAND_EXECUTION]: The skill provides various command-line instructions for environment discovery, directory linking, plugin installation, and using the GitHub CLI to publish discussions and query repository metadata.
Audit Metadata