plugin-structure
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely educational and documentation-focused, providing guidance on Claude Code plugin architecture and organization.\n- [COMMAND_EXECUTION]: Provides examples of using bash, node, and python to execute local plugin scripts and MCP servers, utilizing the
${CLAUDE_PLUGIN_ROOT}environment variable for secure, portable path referencing.\n- [EXTERNAL_DOWNLOADS]: Includes examples of development workflows using standard tools likenpx eslint, which interacts with the official npm registry.\n- [CREDENTIALS_UNSAFE]: Demonstrates secure handling of credentials by advising the use of environment variable placeholders (e.g.,${API_KEY},${GITHUB_TOKEN}) in configuration files rather than hardcoding secrets.
Audit Metadata