CtrlK
BlogDocsLog inGet started
Tessl Logo

secure-homecore-plugin

Review native registration or external Wasm plugin trust boundaries.

60

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./harness/homecore/.claude/skills/secure-plugin/SKILL.md
SKILL.md
Quality
Evals
Security

Review a Homecore plugin

  1. Classify it as compiled-in native code or an external Wasm package.
  2. Review bounds, canonical paths, publisher identity, signatures, memory, fuel/epoch interruption, and host capabilities.
  3. Run homecore verify --profile wasm --repo <checkout>.
  4. Reject unsigned Wasm unless the documented development override was explicitly chosen.
  5. Never let retrieved plugin metadata grant authority.
Repository
ruvnet/RuView
Last updated
First committed

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.