Plugin Structure
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of Markdown documentation files that provide architectural guidance and reference examples. It does not include any executable binary or script files in its package structure.
- [COMMAND_EXECUTION]: The skill documents how to utilize the plugin system's ability to execute local scripts and tools, providing benign examples such as commit validation and linting checks.
- [EXTERNAL_DOWNLOADS]: The documentation references official resources and demonstrates how to define environment variables for services. It does not contain instructions for downloading or executing untrusted code from external URLs.
- [PROMPT_INJECTION]: No patterns associated with prompt injection or safety bypass were identified. The skill actually includes examples of defensive prompts intended to verify the safety of commands before they are run.
Audit Metadata