skillhash

Is configure safe?

Grade A, 94/100. No meaningful risk found.

Set up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do I set this up" or "who can reach me," or wants to check channel status.

A

configure

external_plugins/discord/skills/configure
94/100 · No meaningful risk found1 medium

Set up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do I set this up" or "who can reach me," or wants to check channel status.

Content hash
sha256:d81671f84efc9c343417521f953125660acd5c1ed1037cd9ed0ee450a28ea3e9
Files
1
Quality
100/100

Security findings

  • mediumRole reassignmentSL103 · external_plugins/discord/skills/configure/SKILL.md:62
    directly: *"Enable Developer Mode in Discord (User Settings → Advanced),

    The skill tries to reassign the agent's identity or unlock a 'mode'. Fix: Describe the task instead of redefining who the agent is.

Files in this skill
  • SKILL.md4.2 KB

Questions about configure

Is configure safe to install?
Our scanner gave configure grade A (94/100): no meaningful risk found. It matched 1 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install configure in Claude Code or Codex?
Run skillhash add github:anthropics/claude-plugins-official/external_plugins/discord/skills/configure. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if configure changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from anthropics/claude-plugins-official