plugin-structure

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely educational and documentation-focused, providing guidance on Claude Code plugin architecture and organization.\n- [COMMAND_EXECUTION]: Provides examples of using bash, node, and python to execute local plugin scripts and MCP servers, utilizing the ${CLAUDE_PLUGIN_ROOT} environment variable for secure, portable path referencing.\n- [EXTERNAL_DOWNLOADS]: Includes examples of development workflows using standard tools like npx eslint, which interacts with the official npm registry.\n- [CREDENTIALS_UNSAFE]: Demonstrates secure handling of credentials by advising the use of environment variable placeholders (e.g., ${API_KEY}, ${GITHUB_TOKEN}) in configuration files rather than hardcoding secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 12:47 AM