grag

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution.

  PERMISSION_SHELL_UNDECLARED

  scripts/build_windows_runtime.py, line 46

  subprocess.run([commands["perl"], "Configure", *options], cwd=source_dir, check=True) # noqa: S603 - trusted build tools and verified source

  scripts/build_windows_runtime.py, line 47

  subprocess.run([commands["nmake"]], cwd=source_dir, check=True) # noqa: S603 - trusted build tools and verified source

  scripts/smoke_wheel.py, line 73

  subprocess.run([str(python), "-m", "pip", "install", "pytest>=8.0"], check=True, cwd=root, env=env)

  Show more

  scripts/smoke_wheel.py, line 92

  subprocess.run([str(python), "-m", "pytest", "-q", str(checks),

  scripts/smoke_wheel.py, line 119

  subprocess.run([str(python), "-m", "pip", "install", str(wheel)], check=True, cwd=root)

  scripts/smoke_wheel.py, line 131

  subprocess.run([str(python), str(script), str(ROOT)], check=True, cwd=root, env=env, timeout=90)

  scripts/smoke_wheel.py, line 133

  subprocess.run([*command, "init", "--client", "claude", "--dry-run"], check=True, cwd=root, env=env, timeout=30)

  scripts/smoke_wheel.py, line 134

  result = subprocess.run([*command, "doctor", "--json"], cwd=root, env=env, capture_output=True, timeout=60)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  deploy/ci-ingest.sh, line 27

  job="$(curl -fsS "${auth[@]}" -X POST "$GRAG_SERVER_URL/api/jobs/ingest/code" \

  deploy/ci-ingest.sh, line 34

  body="$(curl -fsS "${auth[@]}" "$GRAG_SERVER_URL/api/jobs/$id")"

  scripts/build_windows_runtime.py, line 37

  with urllib.request.urlopen(URL, timeout=120) as response, archive.open("wb") as output:

  Show more

  scripts/smoke_wheel.py, line 77

  with urllib.request.urlopen(url, timeout=120) as response:

  src/grag/client.py, line 113

  response = self.http.request(method, path, **kwargs)

  ui/src/api.ts, line 74

  res = await fetch(apiUrl(path, db), { headers, ...init });

  deploy/Dockerfile, line 30

  CMD python -c "import urllib.request,sys; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:47832/api/health', timeout=3).status==200 else 1)"

  deploy/docker-compose.yml, line 23

  test: ["CMD", "python", "-c", "import urllib.request,sys; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:47832/api/health', timeout=3).status==200 else 1)"]

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_UNCONFIRMED

  examples/embedding_eval.py, line 67

  api_key_env=os.environ.get("GRAG_EMBED_API_KEY_ENV"),

  src/grag/config.py, line 172

  if budget := os.environ.get("GRAG_TOKEN_BUDGET"):

  src/grag/config.py, line 176

  if token := os.environ.get("GRAG_API_TOKEN"):

  Show more

  src/grag/config.py, line 202

  api_key_env=os.environ.get("GRAG_EMBED_API_KEY_ENV"),

  src/grag/project.py, line 200

  if os.environ.get("GRAG_API_TOKEN"):

  deploy/docker-compose.yml, line 14

  GRAG_API_TOKEN: ${GRAG_API_TOKEN:?set GRAG_API_TOKEN in .env}

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit c08f40d5777e. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. reads a credential or environment file.

Date and source

Date checked: 19 Oct 2026

Read how this letter is chosen