PlugMyPlugin
← Browse

skill-preinstall-review

Sebastian197 ★ 0

This skill sandboxes third-party plugins and skills in a locked Docker container with decoy credentials and syscall tracing to reveal what code actually does before you install it. It detects network attempts, credential theft, file modifications, persistent processes, and suspicious static patterns, then generates a verdict and evidence report.

Security DevOps No API key detected prompt pack

Install

> /plugin marketplace add Sebastian197/skill-preinstall-review/tree/HEAD/plugins/skill-preinstall-review
> /plugin install skill-preinstall-review

Source: https://github.com/Sebastian197/skill-preinstall-review/tree/HEAD/plugins/skill-preinstall-review

What it's made of

1 skill

Commands
0
Agents
0
Skills
1
MCP servers
0
Hooks
0

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
none
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (Sebastian197).