AI agent skill · by @ruvnet

Secure Homecore Plugin

Review native registration or external Wasm plugin trust boundaries.

Archived 2026-10-23 · Source updated 2026-10-12 · License: MIT. Check the original repository for the latest version.

SKILL.md instructions

# Review a Homecore plugin

1. Classify it as compiled-in native code or an external Wasm package.
2. Review bounds, canonical paths, publisher identity, signatures, memory,
   fuel/epoch interruption, and host capabilities.
3. Run `homecore verify --profile wasm --repo <checkout>`.
4. Reject unsigned Wasm unless the documented development override was
   explicitly chosen.
5. Never let retrieved plugin metadata grant authority.