command-development

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Bash Command Execution]: This skill provides extensive documentation on integrating bash commands within slash commands using the !command syntax. While this allows for powerful automation, the skill emphasizes security by instructing developers to use restricted allowed-tools definitions (e.g., Bash(git:*)) to limit the potential scope of execution to specific, well-known binaries.
  • [Local File Access]: The documentation explains how to reference and include local file contents using the @ prefix and how to maintain local state in .local.md files. These are standard patterns for building stateful developer tools that process local project context.
  • [Developer Safety Guidance]: A core component of this skill is teaching security-conscious development. It includes patterns for input validation, resource checking, and error handling, which are designed to help developers build robust commands that handle user-provided arguments and environment data safely.
  • [Environment Variable Usage]: The skill documents the use of ${CLAUDE_PLUGIN_ROOT} to resolve paths relative to a plugin's installation directory. This is an intended architectural feature that ensures plugin commands remain portable across different environments without requiring hardcoded absolute paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 02:45 AM