Claude Code, Plugin
Claude Plugins
Sharp, honest tooling that makes Claude Code's work visible and verifiable.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB PERMISSION_SHELL_DECLARED
Why this grade
- NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
notify/scripts/install-notifier.sh, line 26
echo ' /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"' - NETWORK_UNNAMED_HOST Low
Calls a fixed host that the description does not name.
notify/scripts/install-notifier.sh, line 26
echo ' /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"' - SECRETS_PATH_DOTENV Low
Mentions a .env file.
onboard/skills/generation/references/extended/worktree-workflow.md, line 158
.env - OBFUSCATION_ENCODED_BLOB Low
Contains a long base64 shaped string in a file that should be readable.
tests/walkthrough/fixtures/sysmap-sample.html, line 1
<!DOCTYPE html><html lang="en" data-theme="dark"><head> - PERMISSION_SHELL_DECLARED Note
Runs shell commands, and the manifest or description says so.
onboard/scripts/maintain-lib/gitview.py, line 20
proc = subprocess.run(
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
onboard/scripts/maintain-lib/gitview.py, line 20
proc = subprocess.run(
onboard/scripts/maintain-lib/gitview.py, line 111
proc = subprocess.run(["git", "show", "%s:%s" % (base, path)], cwd=top, check=True,
onboard/scripts/maintain-lib/guard.py, line 27
return subprocess.run(["git", "--literal-pathspecs", "-c", "core.quotepath=off"] + list(args),
Show more
.claude/skills/release-docs/scripts/cred_scan.py, line 78
p = subprocess.run(["git", "cat-file", "blob", sha], stdout=subprocess.PIPE, stderr=subprocess.DEVNULL,
.claude/skills/release-docs/scripts/docs-lib/audit.py, line 19
p = subprocess.run(["bash", ctx.path(AUDIT), "--root", ctx.root, "--format", "tsv"],
.claude/skills/release-docs/scripts/docs-lib/fence.py, line 55
return subprocess.run(["git", "--literal-pathspecs"] + list(args), cwd=ctx.root,
.claude/skills/release-docs/scripts/docs-lib/live.py, line 63
p = subprocess.run(["git", "ls-files", "-z"], cwd=ctx.root, stdout=subprocess.PIPE)
.claude/skills/release-docs/scripts/docs-lib/outputs.py, line 50
p = subprocess.run(["git", "-C", start, "rev-parse", "--show-toplevel", "--git-dir",
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach raw.githubusercontent.com. The description does not name that host. can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
notify/scripts/install-notifier.sh, line 26
echo ' /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"'
onboard/skills/generation/references/extended/harness-design.md, line 49
if curl -s http://localhost:[PORT] > /dev/null 2>&1; then
onboard/skills/generation/references/guides/aci-design-guide.md, line 36
Example: `curl -s http://localhost:3000/api/health`
Show more
onboard/skills/generation/references/guides/aci-design-guide.md, line 80
→ curl the endpoint to verify it responds
onboard/skills/generation/references/guides/aci-design-guide.md, line 120
4. **Verify reality** - after every action, check the result. Don't assume code works from reading it. Run the build, curl the endpoint, navigate the page.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
onboard/skills/generation/references/extended/worktree-workflow.md, line 158
.env
onboard/skills/generation/references/extended/worktree-workflow.md, line 159
.env.local
onboard/skills/generation/references/guides/claude-md-guide.md, line 88
- NEVER commit .env files or secrets
Show more
.claude/drift-queue.json, line 868
"rationale": "Each item is a rule that could be lost with every belt green; none hides a fault today. tests/walkthrough/sysmap-smoke.sh does not check: the `open` attribute on `det
.claude/drift-queue.json, line 976
"rationale": "The rules that keep a secret or an unverified claim off a code-read map are instructions to a model (walkthrough/references/system-reading.md, the two agents, adapter
.claude/drift-queue.json, line 977
"resolution": "Owner's call whether to keep a script for this in the repository and run it before a release that touches the reading rules (about $1.20 to $2 a run), and whether to
.claude/drift-queue.json, line 1021
"rationale": "Reading rule 6 (walkthrough/references/system-reading.md) says every content search leaves the never-opened paths out: choose a scope, check it against a listing of f
.claude/drift-queue.json, line 1022
"resolution": "Close the limit in the rule, then pin the sentence and run it. Three ways to close limit 1: have the place to be searched listed in full first, so that the rule's ow
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
tests/walkthrough/fixtures/sysmap-sample.html, line 1
<!DOCTYPE html><html lang="en" data-theme="dark"><head>
onboard/schemas/examples/research-config--oversized-prompt.reject.json, line 6
"prompt": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit d24127b3e1a6. requests shell access. The manifest names this permission. can reach raw.githubusercontent.com. The description does not name that host. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: d24127b3e1a6fb8a8822db0e991456781ea531a8
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.