plugin-creator
Guides users in creating structured plugins for Claude Code, including agent and skill development with best practices.
Install this skill
or
76/100
Security score
The plugin-creator skill was audited on Feb 21, 2026 and we found 6 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 201
Template literal with variable interpolation in command context
SourceSKILL.md
| 201 | ```json |
high line 236
Template literal with variable interpolation in command context
SourceSKILL.md
| 236 | Important: Use `${CLAUDE_PLUGIN_ROOT}` for portable paths within plugin. |
low line 254
Access to .env file
SourceSKILL.md
| 254 | if [[ "$FILE_PATH" == *.env* ]]; then |
low line 255
Access to .env file
SourceSKILL.md
| 255 | echo "Cannot write to .env files" >&2 |
low line 306
External URL reference
SourceSKILL.md
| 306 | - Plugin documentation: https://code.claude.com/docs/en/plugins |
low line 307
External URL reference
SourceSKILL.md
| 307 | - Hooks reference: https://code.claude.com/docs/en/hooks |
Scanned on Feb 21, 2026
View Security DashboardGitHub Stars 508
Rate this skill
Categorydevelopment
UpdatedMay 20, 2026
Dicklesworthstone/pi_agent_rust