Claude Code, Skill
Ai Native Toolkit
Skills for AI-native development.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 82a6017d2079, unchanged since the check below.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
skills/assess/scripts/lib/agent_harness.py, line 146
r"|\.netrc|\.npmrc|\.pypirc|\.git-credentials")
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
scripts/floor_check.py, line 530
result = subprocess.run(
scripts/floor_check.py, line 561
result = subprocess.run(
scripts/floor_check.py, line 589
result = subprocess.run(
Show more
scripts/floor_check.py, line 617
result = subprocess.run(
scripts/floor_check.py, line 641
result = subprocess.run(
scripts/floor_check.py, line 773
paths = subprocess.run(
scripts/floor_check.py, line 802
return subprocess.run(
scripts/transform_skill.py, line 202
shutil.rmtree(staging)
scripts/transform_skill.py, line 277
shutil.rmtree(staging)
scripts/canaries/run_canaries.py, line 151
return subprocess.run(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/floor_anchor.py, line 280
with urllib.request.urlopen(req) as resp: # noqa: S310 (fixed api host)
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/floor_anchor.py, line 1039
token = os.environ.get("FLOOR_ANCHOR_TOKEN") or os.environ.get("GITHUB_TOKEN")
skills/assess/scripts/lib/agent_harness.py, line 30
- ``tracked_env_file``: a tracked ``.env`` / ``.env.*`` that is not an
skills/assess/scripts/lib/agent_harness.py, line 146
r"|\.netrc|\.npmrc|\.pypirc|\.git-credentials")
Show more
skills/assess/scripts/lib/agent_harness.py, line 33
``CLAUDE.md``), ``.gitignore`` ignores a ``.env`` pattern or an example file
skills/assess/scripts/lib/agent_harness.py, line 34
exists, and ``.claude/settings.json`` has no ``Read(...env...)`` deny.
skills/assess/scripts/lib/agent_harness.py, line 138
_ENV_NAME = re.compile(r"^\.env(\..+)?$")
skills/assess/scripts/lib/agent_harness.py, line 140
_ENV_IGNORE_LINE = re.compile(r"^/?(\*\*/)?\*?\.env(\*|[.*][\w.*-]*)?/?$")
skills/assess/scripts/lib/agent_harness.py, line 141
_ENV_DENY = re.compile(r"^Read\(.*\.env")
skills/assess/scripts/lib/agent_harness.py, line 418
"commit a `.env.example` with placeholder values instead.")
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
docs/example-heatmap-after.svg, line 1
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
docs/example-heatmap-candle.svg, line 1
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
docs/example-heatmap-ktor.svg, line 1
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
Show more
docs/example-heatmap-llamacpp.svg, line 1
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
docs/example-heatmap.svg, line 1
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
docs/huddle-explainer/visualization.html, line 1
<!DOCTYPE html>
skills/tm-marathon-config-example/SKILL.md, line 1
---
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 82a6017d2079. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 82a6017d2079ff660452106e2f48e3030801feb5
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.