Claude Code, Skill
AgentOctopus
Intelligent routing layer that connects user needs to Skills — install once, works everywhere.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_HOST_FROM_INPUT
Why this grade
- NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
apps/cli/skills/ip-lookup/scripts/invoke.js, line 26
const res = await fetch(url, { headers: { 'User-Agent': 'AgentOctopus/0.1' } });
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
apps/cli/src/index.ts, line 704
fs.rmSync(skillDir, { recursive: true });
apps/cli/src/sync-skills.ts, line 285
fs.rmSync(dir, { recursive: true });
packages/sandbox/scripts/build-os-helper.mjs, line 69
await fs.rm(tmp, { force: true }).catch(() => {});
Show more
packages/sandbox/scripts/build-os-helper.mjs, line 106
await fs.rm(tmpOut, { force: true }).catch(() => {});
packages/sandbox/scripts/build-os-helper.mjs, line 145
await fs.rm(HELPER_PATH, { force: true }).catch(() => {});
packages/sandbox/scripts/build-os-helper.mjs, line 146
await fs.rm(MANIFEST_PATH, { force: true }).catch(() => {});
packages/sandbox/scripts/build-os-helper.mjs, line 157
await fs.rm(HELPER_PATH, { force: true }).catch(() => {});
packages/sandbox/scripts/build-os-helper.mjs, line 158
await fs.rm(MANIFEST_PATH, { force: true }).catch(() => {});
packages/sandbox-vm-native/src/engine.ts, line 7
// WHY A SEAM (not a hard-coded addon): Node's child_process.spawn does NOT
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
apps/cli/skills/ip-lookup/scripts/invoke.js, line 26
const res = await fetch(url, { headers: { 'User-Agent': 'AgentOctopus/0.1' } });
apps/cli/skills/translation/scripts/invoke.js, line 39
const res = await fetch(url, { headers: { 'User-Agent': 'AgentOctopus/0.1' } });
apps/cli/skills/weather/scripts/invoke.js, line 16
const res = await fetch(url, { headers: { 'User-Agent': 'AgentOctopus/0.1' } });
Show more
apps/cli/src/index.ts, line 761
const res = await fetch(`${options.server}/api/marketplace`, {
apps/cli/src/skill-create.ts, line 36
// const res = await fetch(\`https://api.example.com?q=\${query}\`);
apps/web/src/app/page.tsx, line 152
fetch('/api/skills')
apps/web/src/app/page.tsx, line 175
const res = await fetch('/api/ask', {
apps/web/src/app/page.tsx, line 208
await fetch('/api/feedback', {
apps/web/src/app/marketplace/page.tsx, line 34
const res = await fetch(url);
packages/registry/src/catalog.ts, line 46
const res = await fetch(url);
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
start-gateway.sh, line 3
source .env
apps/cli/skills/x-search/scripts/search.py, line 224
api_key = os.environ.get("XAI_API_KEY", "").strip()
apps/cli/src/index.ts, line 117
// Auto-trigger onboarding if .env is missing
Show more
apps/cli/src/index.ts, line 129
if (process.env.SLACK_BOT_TOKEN) console.log(chalk.gray(' Slack: enabled'));
apps/cli/src/index.ts, line 130
if (process.env.DISCORD_TOKEN) console.log(chalk.gray(' Discord: enabled'));
apps/cli/src/index.ts, line 131
if (process.env.TELEGRAM_BOT_TOKEN) console.log(chalk.gray(' Telegram: enabled'));
apps/cli/src/index.ts, line 270
// Auto-trigger onboarding if .env is missing
apps/cli/src/index.ts, line 998
.description('Save a credential or config value (written to ~/.agentoctopus/.env)')
apps/cli/src/index.ts, line 1002
// Read existing .env content
apps/cli/src/onboard.ts, line 528
// Collected credentials will be saved to .env at the end
apps/cli/src/onboard.ts, line 624
message: 'Enable Slack bot? (requires SLACK_BOT_TOKEN in .env)',
apps/cli/src/onboard.ts, line 628
message: 'Enable Discord bot? (requires DISCORD_TOKEN in .env)',
apps/cli/src/rating-sync.ts, line 38
const githubToken = process.env.GITHUB_TOKEN;
apps/cli/src/service.ts, line 25
if (process.env.SLACK_BOT_TOKEN) {
apps/cli/src/service.ts, line 29
token: process.env.SLACK_BOT_TOKEN,
apps/cli/src/service.ts, line 30
signingSecret: process.env.SLACK_SIGNING_SECRET,
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
pnpm-lock.yaml, line 1
lockfileVersion: '9.0'
packages/sandbox-vm-native/include/libkrun.h, line 1
/* ---------------------------------------------------------------------
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit e370ed8ca046. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: e370ed8ca046b995ca83b9ece19fbcbb9dcc5de8
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.