Claude Code, Plugin
Claude Computer Use
Codex-style computer use for Claude Code.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 70347e652ab1, unchanged since the check below.
PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED SECRETS_ENV_READ OBFUSCATION_FILE_OVER_READ_CAP
Why this grade
- PERMISSION_DELETE_FILES Low
Contains a call that can delete files.
server/build.mjs, line 213
try { fs.unlinkSync(temp); } catch {} - SECRETS_PATH_UNCONFIRMED Low
The Secrets check reports a credential or environment file, but no quoted line shows a recognisable path.
tools/annotations-test.mjs, line 36
this.proc = spawn(process.execPath, [SERVER], { env: { ...process.env, ...env }, stdio: ['pipe', 'pipe', 'pipe'] }); - SECRETS_ENV_READ Note
Reads an environment variable whose name contains KEY, SECRET, TOKEN, PASSWORD or CREDENTIAL.
tools/annotations-test.mjs, line 36
this.proc = spawn(process.execPath, [SERVER], { env: { ...process.env, ...env }, stdio: ['pipe', 'pipe', 'pipe'] }); - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
server/native/AxonHost.cs, line 1
// Computer Use host - persistent Windows UI Automation driver.
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
server/build.mjs, line 213
try { fs.unlinkSync(temp); } catch {}
server/build.mjs, line 248
try { fs.unlinkSync(full); } catch { /* in use by another session */ }
server/build.mjs, line 293
try { fs.unlinkSync(temp); } catch {}
Show more
server/index.mjs, line 209
else { try { fs.unlinkSync(path.join(APPSHOT_DIR, 'latest.jpg')); } catch { /* none */ } }
server/journal.mjs, line 127
try { fs.unlinkSync(this.file); } catch { /* none to remove */ }
server/journal.mjs, line 173
try { if (fs.statSync(f).mtimeMs < cutoff) fs.unlinkSync(f); } catch { /* next time */ }
server/policy.mjs, line 534
if (!this.grants.size) { fs.rmSync(this.store, { force: true }); return; }
server/sessions.mjs, line 190
if (!rec || !pid) { try { fs.unlinkSync(full); } catch {} continue; }
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_UNCONFIRMED
tools/annotations-test.mjs, line 36
this.proc = spawn(process.execPath, [SERVER], { env: { ...process.env, ...env }, stdio: ['pipe', 'pipe', 'pipe'] });
tools/astra-test.mjs, line 523
env: { ...process.env, ...env }, stdio: ['pipe', 'pipe', 'pipe'],
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
server/native/AxonHost.cs, line 1
// Computer Use host - persistent Windows UI Automation driver.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 70347e652ab1. can delete files. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 70347e652ab19f017939653e1a112eb523695198
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.