Claude Code, Skill
Adonis Skills
Adonis Skills, a skill listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 11653915499d.
INSTALL_LIFECYCLE_HOOK
Why this grade
- INSTALL_LIFECYCLE_HOOK Medium
A package install hook (preinstall, install, postinstall or prepare) runs a script.
package.json, line 17
prepare
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
.agents/skills/repo-skill-creator/scripts/test_init_skill.py, line 17
result = subprocess.run(
.agents/skills/weekly-report/scripts/test_git_analyzer.py, line 38
result = subprocess.run(
.agents/skills/weekly-report/src/git_analyzer.py, line 41
result = subprocess.run(
Show more
.agents/skills/weekly-report/src/git_analyzer.py, line 64
result = subprocess.run(
.agents/skills/weekly-report/src/git_analyzer.py, line 146
result = subprocess.run(
.agents/skills/weekly-report/src/git_analyzer.py, line 248
result = subprocess.run(
skills/agent-dispatch/scripts/dispatch_board.py, line 80
out = subprocess.run(["git", "-C", cwd, *args], capture_output=True, text=True, timeout=10)
skills/agent-dispatch/scripts/dispatch_board.py, line 616
out = subprocess.run(
skills/agentic-review-handoff/scripts/review-loop/adapters.mjs, line 560
fs.rmSync(tmpDir, { recursive: true, force: true });
skills/agentic-review-handoff/scripts/review-loop/auto-run.mjs, line 385
fs.rmSync(lockDir, { recursive: true, force: true });
skills/agentic-review-handoff/scripts/review-loop/auto-run.mjs, line 414
fs.rmSync(lockDir, { recursive: true, force: true });
skills/agentic-review-handoff/scripts/review-loop/auto-run.mjs, line 426
fs.rmSync(lockDir, { recursive: true, force: true });
skills/agentic-review-handoff/scripts/review-loop/auto-run.mjs, line 912
fs.unlinkSync(packetStop);
skills/agentic-review-handoff/scripts/review-loop/prefs.mjs, line 89
fs.rmSync(file, { force: true });
skills/agentic-review-handoff/scripts/review-loop/repositories.mjs, line 748
fs.rmSync(lockDir, { recursive: true, force: true });
Install and update
Concern
runs a script at install time.
INSTALL_LIFECYCLE_HOOK
package.json, line 17
prepare
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
skills/figma-mcp/scripts/figma_rest.py, line 55
with urllib.request.urlopen(req, timeout=180) as resp:
skills/worktree-tidy/scripts/worktree_tidy.py, line 404
found = fetch(slug, branches, since) if tool and shutil.which(tool) else {}
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
.agents/skills/code-inspector-init/SKILL.md, line 12
在开发环境为前端项目接入或修复 `code-inspector-plugin`，实现按组合键后点击 DOM 跳转到源码位置。新接入默认使用插件原生开关策略：`needEnvInspector: true` + `.env.local` 中设置 `CODE_INSPECTOR=true`；但 Next.js `>=15.3` 主模板默认使用 `hotKeys:
.agents/skills/code-inspector-init/SKILL.md, line 65
4. 设置 `.env.local`。
.agents/skills/code-inspector-init/SKILL.md, line 68
- 对 Next.js `>=15.3` 主模板（`hotKeys: ["altKey"]` + `needEnvInspector: false`）不强制配置 `.env.local`。
Show more
.agents/skills/code-inspector-init/references/bundler-recipes.md, line 6
- 使用 `needEnvInspector: true` 时，在 `.env.local` 中启用：`CODE_INSPECTOR=true`
.agents/skills/code-inspector-init/references/bundler-recipes.md, line 288
## .env.local 示例
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
pnpm-lock.yaml, line 1
lockfileVersion: '9.0'
apps/web/src/generated/skills-detail-index.json, line 1
[
skills/chrome-dev-mcp/evals/evals.json, line 1
{
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 11653915499d. can delete files. runs a script at install time. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 11653915499d8b215b5a349d4cc3489ba163c350
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.