command-development
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Bash Command Execution]: This skill provides extensive documentation on integrating bash commands within slash commands using the !
commandsyntax. While this allows for powerful automation, the skill emphasizes security by instructing developers to use restricted allowed-tools definitions (e.g., Bash(git:*)) to limit the potential scope of execution to specific, well-known binaries. - [Local File Access]: The documentation explains how to reference and include local file contents using the @ prefix and how to maintain local state in .local.md files. These are standard patterns for building stateful developer tools that process local project context.
- [Developer Safety Guidance]: A core component of this skill is teaching security-conscious development. It includes patterns for input validation, resource checking, and error handling, which are designed to help developers build robust commands that handle user-provided arguments and environment data safely.
- [Environment Variable Usage]: The skill documents the use of ${CLAUDE_PLUGIN_ROOT} to resolve paths relative to a plugin's installation directory. This is an intended architectural feature that ensures plugin commands remain portable across different environments without requiring hardcoded absolute paths.
Audit Metadata