gpc-plugin-development
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a developer guide for extending the GPC tool. All provided examples and references are consistent with its stated purpose.
- [COMMAND_EXECUTION]: The
scripts/detect_gpc.mjsscript executes local CLI commands (e.g.,gpc --version,gpc auth status) to identify the environment. This is a standard practice for agent-based environment detection and does not involve untrusted input. - [EXTERNAL_DOWNLOADS]: The documentation references official GPC packages (
@gpc-cli/plugin-sdk) and standard developer tools (typescript,vitest). These are well-known resources from public registries. - [DATA_EXPOSURE]: The detection script inspects local configuration and authentication status to provide context to the agent. This information is intended for local agent use and no patterns of unauthorized external exfiltration were found.
Audit Metadata