Claude Code, Skill
Deepworkplan Skill
Deepworkplan Skill, a skill listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
.agents/skills/dailybot/shared/env-json.md, line 406
# Production OTP is already in credentials.json (dailybot login, env off).
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
.agents/skills/deepworkplan/shared/benchmark.py, line 230
proc = subprocess.run(['git', '-C', repo_root] + args,
.agents/skills/deepworkplan/shared/config.py, line 993
shutil.rmtree(tmp, ignore_errors=True)
.agents/skills/deepworkplan/shared/config.py, line 1014
shutil.rmtree(tmp_b, ignore_errors=True)
Show more
.agents/skills/deepworkplan/shared/config.py, line 1073
shutil.rmtree(tmp_d, ignore_errors=True)
.agents/skills/deepworkplan/shared/ledger.py, line 486
shutil.rmtree(self.path, ignore_errors=True)
.agents/skills/deepworkplan/shared/ledger.py, line 525
shutil.rmtree(self.path, ignore_errors=True)
.agents/skills/deepworkplan/shared/ledger.py, line 972
proc = subprocess.run(
.agents/skills/deepworkplan/shared/ledger.py, line 1116
proc = subprocess.run(command, shell=isinstance(command, str),
.agents/skills/deepworkplan/shared/ledger.py, line 1226
proc = subprocess.run(command, shell=isinstance(command, str),
.agents/skills/deepworkplan/shared/ledger.py, line 1246
proc = subprocess.run(['git'] + args, cwd=cwd,
.agents/skills/deepworkplan/shared/ledger.py, line 2099
os.remove(self.r.journal_path)
.agents/skills/deepworkplan/shared/migrate_v6.py, line 725
os.remove(path)
.agents/skills/deepworkplan/shared/migrate_v6.py, line 817
os.remove(os.path.join(plan, 'analysis_results', 'gates',
.agents/skills/deepworkplan/shared/resources.py, line 406
proc = subprocess.run(argv, stdin=subprocess.DEVNULL,
.agents/skills/deepworkplan/shared/swarm.py, line 169
proc = subprocess.run(('git',) + args, cwd=cwd, stdout=subprocess.PIPE,
.agents/skills/deepworkplan/shared/swarm.py, line 193
proc = subprocess.run(('git', 'status', '--porcelain', '-z',
Install and update
Note
The docs document an installer that pipes a download into a shell.
INSTALL_DOCUMENTED_INSTALLER
.agents/skills/dailybot/SKILL.md, line 181
| Universal installer (Linux / macOS / WSL2 / Git Bash) | `curl -fsSL https://cli.dailybot.com/install.sh \| bash` |
Network
Concern
can reach a host that is not written as a fixed address. can reach api.dailybot.com. The description does not name that host. can reach cli.dailybot.com. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
.agents/skills/ai-diff-reviewer/SKILL.md, line 619
- Missing `AbortController` on a `fetch()` in `apps/frontend/` is **warning**
.agents/skills/ai-diff-reviewer/generate-extension/examples.md, line 127
- Missing `AbortController` on `fetch()` inside a React component
.agents/skills/ai-diff-reviewer/generate-extension/examples.md, line 140
`fetch()` in a component is `warning`.
Show more
.agents/skills/dailybot/ask/SKILL.md, line 129
curl -s -X POST "https://api.dailybot.com/v1/cli/chat/completions/" \
.agents/skills/dailybot/chat/SKILL.md, line 454
curl -s -X POST https://api.dailybot.com/v1/send-message/ \
.agents/skills/dailybot/chat/SKILL.md, line 482
curl -s -X POST https://api.dailybot.com/v1/send-message/ \
.agents/skills/dailybot/chat/SKILL.md, line 494
curl -s -X POST https://api.dailybot.com/v1/send-message/ \
.agents/skills/dailybot/checkin/SKILL.md, line 782
curl -s -H "Authorization: Bearer $DAILYBOT_BEARER_TOKEN" \
.agents/skills/deepworkplan/addons/machine-installs.md, line 20
curl -fsSL https://github.com/DailybotHQ/coding-agents-kit/releases/download/v1.0.1/SHA256SUMS -o cak.SHA256SUMS
.agents/skills/deepworkplan/addons/machine-installs.md, line 32
curl -fsSL https://github.com/DailybotHQ/devcontainer-kit/releases/download/v1.0.1/SHA256SUMS -o dck.SHA256SUMS
scripts/smoke-ecosystem-pins.sh, line 80
curl -fsSL "https://github.com/${repo}/releases/download/${tag}/SHA256SUMS" -o "$sums" 2>/dev/null \
skills/deepworkplan/addons/machine-installs.md, line 20
curl -fsSL https://github.com/DailybotHQ/coding-agents-kit/releases/download/v1.0.1/SHA256SUMS -o cak.SHA256SUMS
skills/deepworkplan/addons/machine-installs.md, line 32
curl -fsSL https://github.com/DailybotHQ/devcontainer-kit/releases/download/v1.0.1/SHA256SUMS -o dck.SHA256SUMS
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL
.agents/skills/dailybot/shared/env-json.md, line 406
# Production OTP is already in credentials.json (dailybot login, env off).
scripts/evaluation/v6/lab.py, line 611
env_route_armed = bool(os.environ.get("ANTHROPIC_AUTH_TOKEN"))
scripts/evaluation/v6/lab.py, line 612
claude_files = () if env_route_armed else (".claude.json", ".claude/.credentials.json")
Show more
.agents/skills/dailybot/env/SKILL.md, line 171
| `dailybot login` | Still writes Bearer to `credentials.json`. env.json wins **inside this repo**. Other repos use the Bearer normally. |
.agents/skills/dailybot/shared/env-json.md, line 98
| `profiles[].api_url` | string | optional | Overrides `DAILYBOT_API_URL` / `credentials.json` when this profile is active. Falls through to `https://api.dailybot.com` when absent.
.agents/skills/dailybot/shared/env-json.md, line 182
| 7 | Login session Bearer token (`credentials.json::token`) | From `dailybot login` |
.agents/skills/dailybot/shared/env-json.md, line 196
`env.json` is one of two files (the other being `credentials.json` in the global config dir) where the CLI stores API keys in plain text. Inside a repo, extra care is required - fo
.agents/skills/dailybot/shared/env-json.md, line 439
- **`dailybot login` still works.** It writes to `~/.config/dailybot/credentials.json` (Bearer session). If `env.json` is active for a repo, that key wins over the Bearer for that
.agents/skills/dailybot/shared/env-json.md, line 466
- **`dailybot login` inside a repo with an active env.json profile warns first** - login persists the resolved `api_url` into the GLOBAL `~/.config/dailybot/credentials.json`, so t
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
the file cap was reached before every file was read.
OBFUSCATION_FILE_CAP_REACHED
skills/deepworkplan/guide/execution.md, line 1
# DeepWorkPlan Guide - Execution Rules, Commits and Completion Tracking
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit a41c855dc1c0. can delete files. The docs document an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. can reach api.dailybot.com. The description does not name that host. can reach cli.dailybot.com. The description does not name that host. reads a credential or environment file. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: a41c855dc1c0dc2bd5381982bca26b4c3570d0d3
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.