manage-marketplace
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the process of adding marketplaces and installing plugins from external sources including GitHub, npm, and GitLab. It also references
skillsmp.comas a third-party indexing service for skills. - [CREDENTIALS_UNSAFE]: Mentions the use of environment variables such as
GITHUB_TOKEN,GL_TOKEN, andBITBUCKET_TOKENfor authenticating with private repositories. These references are provided as documentation for standard platform configuration and do not involve hardcoded secrets or exfiltration patterns. - [COMMAND_EXECUTION]: Provides instructions for using the platform's plugin management CLI tools (e.g.,
/plugin marketplace add,/plugin install, and/plugin validate) and configuration variables likeCLAUDE_CODE_PLUGIN_SEED_DIR.
Audit Metadata