creating-plugins
Facilitates the creation of EmDash CMS plugins with hooks, storage, and custom UI components for enhanced content management.
Install this skill
or
82/100
Security score
The creating-plugins skill was audited on Jun 13, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 72
Template literal with variable interpolation in command context
SourceSKILL.md
| 72 | ctx.log.info(`Saved ${event.collection}/${event.content.id}`); |
medium line 341
Template literal with variable interpolation in command context
SourceSKILL.md
| 341 | const id = `${Date.now()}-${Math.random().toString(36).slice(2)}`; |
medium line 177
Node child_process module reference
SourceSKILL.md
| 177 | Key constraint for sandbox compatibility: **no Node.js built-ins** (`fs`, `path`, `child_process`, etc.) in backend code. Use Web APIs instead. |
low line 167
Fetch to external URL
SourceSKILL.md
| 167 | await ctx.http.fetch("https://api.analytics.example.com/track", { |
low line 140
External URL reference
SourceSKILL.md
| 140 | Sandboxed plugins run in isolated V8 isolates on Cloudflare Workers via [Dynamic Worker Loader](https://developers.cloudflare.com/workers/runtime-apis/bindings/worker-loader/). Each plugin gets its ow |
low line 167
External URL reference
SourceSKILL.md
| 167 | await ctx.http.fetch("https://api.analytics.example.com/track", { |
Scanned on Jun 13, 2026
View Security DashboardGitHub Stars 10.8K
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
openclawbackendfrontend-developerbackend-developerproduct-managerux-designerproduct-designerdevelopmentproductdesign
emdash-cms/emdash