configure-claude-plugins

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configures GitHub Actions to download and use anthropics/claude-code-action@v1, which is an official action from a trusted organization.
  • [EXTERNAL_DOWNLOADS]: It references the external repository https://github.com/laurigates/claude-plugins.git as the primary plugin marketplace. As this is a vendor-owned resource (laurigates), it is documented as intended functionality.
  • [COMMAND_EXECUTION]: Configures .claude/settings.json to permit specific Git operations (such as git push, git checkout) and GitHub CLI commands (gh pr, gh issue). These permissions are necessary for the functioning of the configured plugins within the GitHub Actions environment.
  • [REMOTE_CODE_EXECUTION]: Establishes an automation pipeline that executes external code (plugins) from the specified marketplace. The execution happens within the context of GitHub Actions runners and relies on the official Anthropics integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 03:50 PM