Claude Code, Plugin
Agent Ops
Manage Codex, Claude Code and Kiro CLI conversations and runs locally.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
server/extensions/io.ts, line 8
const sensitive = /^(?:\.env(?:\..*)?|\.npmrc|auth(?:entication)?\.j
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
server/harness/bridge.py, line 411
if event in ("subprocess.Popen", "os.system", "os.exec", "os.posix_spawn", "os.fork", "os.forkpty", "socket.connect", "socket.getaddrinfo", "socket.bind"):
server/harness/bridge.py, line 805
child = subprocess.Popen(
server/harness/hooks-files.ts, line 273
await fs.unlink(path);
Show more
server/harness/hooks-files.ts, line 305
if (expected.hash !== null) await fs.unlink(expected.path);
server/harness/hooks-files.ts, line 324
await fs.unlink(temporary);
server/harness/hooks-files.ts, line 355
await fs.unlink(file.path);
server/harness/hooks-files.ts, line 378
await fs.unlink(temporary);
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/package-smoke.mjs, line 59
const response = await fetch(base + path, {
scripts/package-smoke.mjs, line 264
const policyResponse = await fetch(base + '/api/harness/policies/managed', {
server/mcp/http.ts, line 139
response = await fetch(this.target.url!, { method: 'GET', headers: this.headers(), signal: this.signal, redirect: 'manual' });
Show more
server/mcp/http.ts, line 178
response = await fetch(this.endpoint, { method: 'POST', headers: this.headers(true), body, signal: this.signal, redirect: 'manual' });
server/mcp/http.ts, line 231
const response = await fetch(this.target.url!, {
src/features/context-packs/api.ts, line 37
response = await fetch(apiUrl(`${path(id)}/export?${toQueryString({ format })}`), {
src/lib/api.ts, line 22
result = await fetch(apiUrl(path), {
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
server/extensions/io.ts, line 8
const sensitive = /^(?:\.env(?:\..*)?|\.npmrc|auth(?:entication)?\.j
server/extensions/kiro.ts, line 29
/^(?:\.env|\.ssh|\.aws|auth(?:entication)?|oauth|credentials?|tokens?|secrets?|(?:api[-_])?keys?|private[-_]key|id_(?:rsa|dsa|ecdsa|ed25519))(?:[._-]|$)/i.test(part)
server/harness/io.ts, line 9
const sensitiveName = /^(?:\.env(?:\..*)?|\.npmrc|\.netrc|auth(?:enticat
Show more
server/harness/policy.ts, line 65
deny_paths: ['.env', '.env.*', '.ssh/*', '.aws/credentials', '*.pem', '*.key']
server/harness/policy.ts, line 68
deny_paths: ['.env', '.env.*', '.ssh/*', '.aws/credentials', '*.pem', '*.key']
server/harness/policy.ts, line 71
deny_paths: ['.env', '.env.*', '.ssh/*', '.aws/credentials', '*.pem', '*.key']
.gitignore, line 10
artifacts/
.gitignore, line 11
.env
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
package-lock.json, line 1
{
src/pages/Overview.tsx, line 1
import { useFormat } from '../i18n/useFormat';
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 057fecb28090. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 057fecb28090aa465c37533036973ee724a9782c
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.