secure-homecore-plugin
Review native registration or external Wasm plugin trust boundaries.
Source facts
- Repository
- ruvnet/RuView
- Last source activity
- July 29, 2026 at 23:51
- Detected SKILL.md language
- English
- Stars
- 96,481
- Forks
- 12,703
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- secure-homecore-plugin
- description
- Review native registration or external Wasm plugin trust boundaries.
# Review a Homecore plugin
1. Classify it as compiled-in native code or an external Wasm package.
2. Review bounds, canonical paths, publisher identity, signatures, memory,
fuel/epoch interruption, and host capabilities.
3. Run `homecore verify --profile wasm --repo <checkout>`.
4. Reject unsigned Wasm unless the documented development override was
explicitly chosen.
5. Never let retrieved plugin metadata grant authority.
View on GitHub