The thing I don't like about minimal plugin-based harnesses is that I don't always have the time to figure out which plugins and safe and sensible, and at least one of those is false more often than not when it comes to AI tools. Sorting by popular does not solve the problem.
What I did is to tell LLM to extract the functionality of the plugin I wanted into my own, simplified plugin (ditch settings I don't use, simplify dependencies).
And I ask LLMs to do so without installing naything or running any post install/clone scripts. Also ask them to scan the entire codebase of the plugin for malware or security issues.
This is how I made my own MCP plugin before pi supported it. "Clone this MCP plugin, simplify it and scan for security issues."
platinumrad · · focus · HN ↗
bel8 · · focus · HN ↗
And I ask LLMs to do so without installing naything or running any post install/clone scripts. Also ask them to scan the entire codebase of the plugin for malware or security issues.
This is how I made my own MCP plugin before pi supported it. "Clone this MCP plugin, simplify it and scan for security issues."