Security risk report for @forgecat/anthropics_claude-plugins-official_playground v0.0.5
Source Integrity
Low
Profile is sourced from Anthropic's official claude-plugins-official repository (GitHub: anthropics/claude-plugins-official), a trusted first-party source.
Metadata indicates Apache-2.0 license and clear attribution to original source with commit hash (7e401ed).
Agent Intent
Low
Content is purely instructional documentation for building HTML playgrounds; no directives to manipulate the AI, read credentials, exfiltrate data, or hide instructions.
Templates describe legitimate UI/UX patterns (controls, rendering, state management) with no embedded malicious guidance or poisoned code patterns.
Prompt output examples show natural language generation for user-facing copy, not system prompt leakage or credential exfiltration.
Details
Evidence
SKILL.md: 'Follow the template to build the playground. If the topic doesn't fit any template cleanly, use the one closest and adapt.' — standard guidance, no manipulation.
design-playground.md: 'Frame it as a direction to a developer, not a spec sheet' — describes legitimate UX writing, not instruction injection.
code-map.md: 'The prompt combines system context with user comments' — describes user-facing prompt generation, not system prompt access.
Permissions
Low
No tool definitions or MCP servers are declared; the profile is purely documentation and templates.
Skill description ('Creates interactive HTML playgrounds') matches the actual content — no excessive authority claimed.
Templates describe client-side HTML/CSS/JS patterns with no file system, shell, or network access requirements.
Details
Evidence
Profile declares no tools or MCP servers.
SKILL.md: 'Single HTML file. Inline all CSS and JS. No external dependencies.' — explicitly restricts to self-contained, sandboxed output.
All templates focus on DOM manipulation and state management, not system-level operations.
MCP Risk
Low
No MCP servers are defined in the profile.
Content is documentation and template guidance only; no binary execution, network calls, or filesystem access are configured.
ForgeCat