Grades are a hygiene check, not a security guarantee.

Claude Code, Skill

Agent Ste

Write technical and agent-facing text in ASD-STE100 Simplified Technical English.

Compatibility: Not stated.

Grade C

One Medium finding. Read the report before installing.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

INSTALL_REMOTE_SCRIPT

Why this grade

  • INSTALL_REMOTE_SCRIPT Medium

    Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).

    evals/ab-1.0.2/raw/claude-sonnet-5-medium__candidate__getting-started.json, line 2 "text": "Getting Started\n\nFollow these steps to install and run sqlpipe.\n\n1. Install sqlpipe. Run this command: `curl -sSL https://get.sqlpipe.dev | sh`\n2. Create a file named

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Note

    requests shell access. The manifest names this permission.

    PERMISSION_SHELL_DECLARED

    evals/run_bench.py, line 68

    proc = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout, cwd="/tmp")

    evals/run_bench.py, line 88

    proc = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout, cwd="/tmp")

    evals/ab-1.0.2/ab_test.py, line 40

    proc = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout, cwd="/tmp")

  • Install and update

    Serious

    install fetches a script from the network.

    INSTALL_REMOTE_SCRIPT

    evals/ab-1.0.2/raw/claude-sonnet-5-medium__candidate__getting-started.json, line 2

    "text": "Getting Started\n\nFollow these steps to install and run sqlpipe.\n\n1. Install sqlpipe. Run this command: `curl -sSL https://get.sqlpipe.dev | sh`\n2. Create a file named

    evals/ab-1.0.2/raw/claude-sonnet-5-medium__current__getting-started.json, line 2

    "text": "## Getting started\n\nInstall sqlpipe with this command:\n\n```\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThe command downloads sqlpipe and installs it on your syste

    evals/ab-1.0.2/raw/gemini-3.6-flash-medium__candidate__getting-started.json, line 2

    "text": "# Getting Started\n\nThis document helps you install, configure, and run `sqlpipe`. Follow these steps to start `sqlpipe` for the first time.\n\n## Prerequisites\n\nBefore

    Show more

    evals/ab-1.0.2/raw/gemini-3.6-flash-medium__current__getting-started.json, line 2

    "text": "# Getting Started\n\nThe `sqlpipe` tool moves data between database systems. This section explains how to install, configure, and run `sqlpipe`.\n\n## Prerequisites\n\nBef

    evals/ab-1.0.2/raw/gpt-5.5-medium__candidate__getting-started.json, line 2

    "text": "## Getting Started\n\nMake sure that you can use `sh` and `curl` on your workstation.\n\nInstall sqlpipe:\n\n```sh\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nCreate `

    evals/ab-1.0.2/raw/gpt-5.5-medium__current__getting-started.json, line 2

    "text": "## Getting Started\n\nOpen a terminal on the computer that will run sqlpipe.\n\nInstall sqlpipe with this command:\n\n```sh\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\

    evals/results/raw/claude-fable-5-medium__agent-ste__getting-started.json, line 2

    "text": "# Getting started\n\nDo the steps below in order.\n\n## 1. Install sqlpipe\n\nRun this command:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThe command down

    evals/results/raw/claude-fable-5-medium__baseline__getting-started.json, line 2

    "text": "## Getting Started\n\n### Installation\n\nInstall sqlpipe with a single command:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThis downloads the latest relea

    evals/results/raw/claude-fable-5-medium__simple-english__getting-started.json, line 2

    "text": "**Getting started**\n\nsqlpipe moves data between databases from the command line. This section shows the installation, the configuration, and the first run.\n\n**Install

    evals/results/raw/claude-opus-4-8-medium__agent-ste__getting-started.json, line 2

    "text": "## Getting started\n\nThe `sqlpipe` tool moves data from a source database to a target database.\n\nFollow these steps to install and run `sqlpipe` for the first time.\n\n

    evals/results/raw/claude-opus-4-8-medium__baseline__getting-started.json, line 2

    "text": "# Getting Started\n\nGet up and running with **sqlpipe** in three quick steps.\n\n## 1. Install\n\nInstall the CLI with a single command:\n\n```bash\ncurl -sSL https://get

    evals/results/raw/claude-opus-4-8-medium__simple-english__getting-started.json, line 2

    "text": "## Getting Started\n\nsqlpipe moves data from a source database to a target database. This section shows you how to install sqlpipe, configure it, and run your first job.\

    evals/results/raw/claude-opus-5-medium__agent-ste__getting-started.json, line 2

    "text": "## Getting started\n\nsqlpipe moves tables from one database to another. Follow the three steps below.\n\n### 1. Install the tool\n\nRun this command:\n\n```\ncurl -sSL ht

    evals/results/raw/claude-opus-5-medium__simple-english__getting-started.json, line 2

    "text": "## Getting started\n\nThis section tells you how to install sqlpipe, how to write the configuration file, and how to move your first data.\n\n### 1. Install sqlpipe\n\nRun

    evals/results/raw/claude-sonnet-5-medium__agent-ste__getting-started.json, line 2

    "text": "## Getting started\n\nFollow these three steps to install and run sqlpipe.\n\n1. Install sqlpipe. Run this command in your terminal: `curl -sSL https://get.sqlpipe.dev | s

    evals/results/raw/claude-sonnet-5-medium__baseline__getting-started.json, line 2

    "text": "## Getting Started\n\nsqlpipe is a lightweight CLI tool for building and running data pipelines from the command line.\n\n### Installation\n\nInstall sqlpipe with a single

    evals/results/raw/claude-sonnet-5-medium__simple-english__getting-started.json, line 2

    "text": "Getting Started\n\nInstall sqlpipe with this command:\n\n`curl -sSL https://get.sqlpipe.dev | sh`\n\nThis command downloads sqlpipe and installs it on your system.\n\nAfte

    evals/results/raw/composer-2.5__agent-ste__getting-started.json, line 2

    "text": "# Getting Started\n\nThis guide tells you how to install sqlpipe, create a configuration file, and run your first pipeline.\n\n## Install sqlpipe\n\nRun this command in yo

    evals/results/raw/composer-2.5__baseline__getting-started.json, line 2

    "text": "# Getting started\n\nInstall sqlpipe with:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nAfter installation, confirm it is available:\n\n```bash\nsqlpipe --ve

    evals/results/raw/composer-2.5__simple-english__getting-started.json, line 2

    "text": "# Getting Started\n\nsqlpipe copies data from a source database to a target database.\n\n## Install\n\nOpen a terminal on Linux or macOS.\n\nRun `curl -sSL https://get.sql

    evals/results/raw/cursor-grok-4.5-medium__agent-ste__getting-started.json, line 2

    "text": "## Getting started\n\nThis section shows you how to install sqlpipe, write a configuration file, and run your first job.\nComplete these steps in order:\n\n1. Install sqlp

    evals/results/raw/cursor-grok-4.5-medium__baseline__getting-started.json, line 2

    "text": "## Getting started\n\nInstall sqlpipe with the official installer:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThis downloads the binary and places it on yo

    evals/results/raw/cursor-grok-4.5-medium__simple-english__getting-started.json, line 2

    "text": "## Getting started\n\nRun this command to install sqlpipe:\n\n`curl -sSL https://get.sqlpipe.dev | sh`\n\nCreate a configuration file named `sqlpipe.yaml`. Put this file i

    evals/results/raw/gemini-3.6-flash-medium__agent-ste__getting-started.json, line 2

    "text": "# Getting Started with sqlpipe\n\n`sqlpipe` moves data between databases. Follow these steps to install, configure, and run `sqlpipe`.\n\n## Step 1: Install sqlpipe\n\nRun

    evals/results/raw/gemini-3.6-flash-medium__baseline__getting-started.json, line 2

    "text": "## Getting Started\n\nGet up and running with `sqlpipe` in three quick steps.\n\n### 1. Install `sqlpipe`\nInstall the CLI tool directly using the automated installation s

    evals/results/raw/gemini-3.6-flash-medium__simple-english__getting-started.json, line 2

    "text": "# Getting Started with sqlpipe\n\nThis document shows you how to install, configure, and run sqlpipe.\n\n## Step 1: Install sqlpipe\n\nTo install sqlpipe, run this command

    evals/results/raw/glm-5.2-max__agent-ste__getting-started.json, line 2

    "text": "# Getting started\n\nThis section shows how to install sqlpipe and run your first job.\n\n## What sqlpipe does\n\nsqlpipe moves rows from a source database to a target dat

    evals/results/raw/glm-5.2-max__baseline__getting-started.json, line 2

    "text": "# Getting started\n\nInstall sqlpipe with a single command:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThis downloads the latest binary and places it on yo

    evals/results/raw/glm-5.2-max__simple-english__getting-started.json, line 2

    "text": "# Getting started\n\n## 1. Install sqlpipe\n\nInstall sqlpipe with this command:\n\n```\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThe command puts the `sqlpipe` bina

    evals/results/raw/gpt-5.5-medium__agent-ste__getting-started.json, line 2

    "text": "## Getting Started\n\nUse this procedure to install sqlpipe and run your first pipeline.\n\n1. Install sqlpipe with this command:\n\n```sh\ncurl -sSL https://get.sqlpipe.d

    evals/results/raw/gpt-5.5-medium__baseline__getting-started.json, line 2

    "text": "## Getting Started\n\nInstall `sqlpipe` with the one-line installer:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nAfter installation, create a `sqlpipe.yaml`

    evals/results/raw/gpt-5.5-medium__simple-english__getting-started.json, line 2

    "text": "## Getting Started\n\nUse this procedure to install sqlpipe, create a configuration file, and do the first run.\n\n1. Install sqlpipe.\n2. Run `curl -sSL https://get.sqlpi

    evals/results/raw/gpt-5.6-sol-medium__agent-ste__getting-started.json, line 2

    "text": "# Getting started\n\nComplete the following procedure.\n\n## 1. Install sqlpipe\n\nRun the following command in your terminal:\n\n```sh\ncurl -sSL https://get.sqlpipe.dev

    evals/results/raw/gpt-5.6-sol-medium__baseline__getting-started.json, line 2

    "text": "## Getting started\n\nInstall sqlpipe with the official installation script:\n\n```sh\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nConfirm the installation:\n\n```sh\ns

    evals/results/raw/gpt-5.6-sol-medium__simple-english__getting-started.json, line 2

    "text": "## Getting started\n\n### 1. Install sqlpipe\n\nOpen a terminal.\n\nRun the installation command:\n\n```sh\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nOpen a new termi

    evals/results/raw/gpt-5.6-terra-medium__agent-ste__getting-started.json, line 2

    "text": "## Getting started\n\n1. Install sqlpipe.\n\n```sh\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\n2. Create the `sqlpipe.yaml` file.\n\n3. Add the required values to `sql

    evals/scenarios.json, line 10

    "prompt": "Write a 'Getting started' documentation section for the CLI tool sqlpipe: install with `curl -sSL https://get.sqlpipe.dev | sh`, configure sqlpipe.yaml, first run with `

  • Network

    Pass

    No network call found.

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_PATH_UNCONFIRMED

    evals/results/raw/claude-opus-5-medium__baseline__getting-started.json, line 2

    "text": "## Getting started\n\n### Install\n\nInstall sqlpipe with the one-line installer:\n\n```bash\ncurl -sSL https://get.sqlpipe.dev | sh\n```\n\nThis places the `sqlpipe` bina

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Note

    the file cap was reached before every file was read.

    OBFUSCATION_FILE_CAP_REACHED

    evals/results/raw/gpt-5.6-luna-medium__judge__incident-report.json, line 1

    {

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Note

Hygiene check of commit 7a2b81f3e544. requests shell access. The manifest names this permission. install fetches a script from the network. reads a credential or environment file. the file cap was reached before every file was read.

Date and source

Date checked:

View source

github.com

Commit graded: 7a2b81f3e54470b32758ed528236e259c87562ae

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen