Claude Code, Plugin
foreman
Hooks that stop Claude Code from writing secrets, insecure code patterns, making junk commits, and skipping tests.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
PERMISSION_SHELL_UNDECLARED
Why this grade
- PERMISSION_SHELL_UNDECLARED Medium
Runs shell commands that the manifest or description does not mention.
hooks/foreman_state.py, line 74
done = subprocess.run(
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
requests shell access. No manifest field names shell or command execution. can delete files.
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
hooks/foreman_state.py, line 74
done = subprocess.run(
hooks/foreman_state.py, line 161
shutil.rmtree(path, ignore_errors=True)
hooks/insecure_code.py, line 175
"Use shell=False and pass command as a list: subprocess.run(['git', 'clone', repo_url]) instead of subprocess.run(f'git clone {repo_url}', shell=True)"
Show more
hooks/insecure_code.py, line 182
"Use subprocess.run with a list of arguments and shell=False instead of os.system"
hooks/insecure_code.py, line 188
"child_process.exec with template literals allows command injection",
README.md, line 121
subprocess.run(f"git clone {repo_url}", shell=True) # Warns
README.md, line 122
subprocess.run(["git", "clone", repo_url]) # Safe, allows
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
evals/security-ranks-by-exploitability/graders/names-the-ssrf.md, line 10
`/fetch` passes a caller-controlled URL straight into `requests.get`, which reaches the cloud
evals/security-ranks-by-exploitability/prompt.md, line 33
def fetch():
evals/security-ranks-by-exploitability/prompt.md, line 36
return requests.get(target, timeout=5).text
Show more
evals/security-ranks-by-exploitability/prompt.md, line 54
return requests.post(
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
hooks/foreman_state.py, line 33
(?:^|/) (?: \.env(?:\.|$) | node_modules/ | vendor/ | dist/ | build/
hooks/no_secrets.py, line 68
(?:^|/) (?: \.env(?:\.|$) | node_modules/ | vendor/ | dist/ | build/
hooks/no_secrets.py, line 128
f"[foreman] Detected {what}. Use environment variables (see .env) instead. "
Show more
hooks/no_secrets.py, line 133
mode = os.environ.get("FOREMAN_SECRETS", "").strip().lower()
README.md, line 96
- `.env` and `.env.local`. That is where the real value belongs.
SECURITY.md, line 18
- Any way to get a live credential written to disk past the secrets gate, outside the paths it exempts on purpose (`.env`, tests, fixtures, examples, and prose).
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 90ffd3622bc7. requests shell access. No manifest field names shell or command execution. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: 90ffd3622bc7d86111d2bd49f7c30e337aabf5e8
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.