Security audit
Skills Setup
Security checks across malware telemetry and agentic risk
Overview
This plugin deliberately runs reviewed setup scripts for installed skills, and that high-impact behavior is clearly disclosed and limited to admin-triggered use.
Install only if you need an admin tool for running trusted skill setup scripts. Before invoking skills.setup, review the selected skill's setup script and any env or secret values being passed, because the script can install packages, write local files, use network services, and perform any action allowed by the agent process user.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.