Claude Code, Skill
Hey Cli
HEY CLI and Agent Skills
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit c5fe278682c7.
INSTALL_REMOTE_SCRIPT SECRETS_PATH_CREDENTIAL
Why this grade
- INSTALL_REMOTE_SCRIPT High
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
internal/cmd/upgrade_selfupdate.go, line 118
return "curl -fsSL https://hey.com/install-cli | bash" - SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
internal/auth/store.go, line 89
filepath.Join(s.fallbackDir, "credentials.json"))
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
internal/auth/browser.go, line 29
return exec.CommandContext(context.Background(), cmd, args...).Start() // #nosec G204 -- fixed OS launcher receives the OAuth URL as a single argument
internal/cmd/completion.go, line 39
pwsh PS> hey shell-completion generate powershell | Out-String | Invoke-Expression
internal/cmd/completion_install.go, line 166
probe := exec.CommandContext(ctx, "zsh", "-ic", "print -rl -- $fpath")
Show more
internal/cmd/completion_install.go, line 211
"hey shell-completion generate powershell | Out-String | Invoke-Expression")
internal/cmd/omarchy_plugin.go, line 717
cmd := exec.CommandContext(ctx, name, args...) // #nosec G204 -- fixed omarchy command names
internal/cmd/setup_agent.go, line 86
command := exec.CommandContext(ctx, name, args...) // #nosec G204 -- name comes from harness.Find*Binary
internal/cmd/upgrade.go, line 424
upgrade := exec.CommandContext(ctx, brew, "upgrade", "--cask", homebrewCask) //nolint:gosec // G204: brew is derived from the running executable's own Homebrew prefix
internal/cmd/upgrade.go, line 437
upgrade := exec.CommandContext(ctx, "scoop", args...)
Install and update
Serious
install fetches a script from the network. The docs document an installer that pipes a download into a shell.
INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER
internal/cmd/upgrade_selfupdate.go, line 118
return "curl -fsSL https://hey.com/install-cli | bash"
.github/workflows/installer-smoke.yml, line 46
curl -fsSL "https://hey.com/install-cli?sha=${GITHUB_SHA}" | bash
scripts/install.ps1, line 223
curl -fsSL https://hey.com/install-cli | bash
Show more
scripts/install.sh, line 5
# curl -fsSL https://hey.com/install-cli | bash
scripts/install.sh, line 405
Either install inside WSL2 (curl -fsSL https://hey.com/install-cli | bash) or see
README.md, line 41
curl -fsSL https://hey.com/install-cli | bash
docs/install.md, line 12
curl -fsSL https://hey.com/install-cli | bash
docs/install.md, line 152
`curl -fsSL https://hey.com/install-cli | bash`
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
internal/cmd/contact_note_set.go, line 139
note, err := fetch(ctx, contactID)
internal/cmd/journal.go, line 376
existing, err := fetch(ctx, date)
internal/cmd/local_config_trust.go, line 66
// work from any directory — the installer pipes curl from wherever
Show more
internal/cmd/local_config_trust.go, line 90
// directory the user piped curl in — possibly a repository with an
internal/cmd/local_config_trust_test.go, line 267
// The installer pipes curl from an arbitrary directory: a malformed
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL
internal/auth/auth.go, line 90
if token := os.Getenv("HEY_TOKEN"); token != "" {
internal/auth/auth.go, line 139
if token := os.Getenv("HEY_TOKEN"); token != "" {
internal/auth/store.go, line 89
filepath.Join(s.fallbackDir, "credentials.json"))
Show more
internal/auth/auth.go, line 185
if os.Getenv("HEY_TOKEN") != "" {
internal/auth/store.go, line 62
noKeyring: os.Getenv("HEY_NO_KEYRING") != "",
internal/cmd/auth.go, line 171
if os.Getenv("HEY_TOKEN") != "" {
internal/cmd/auth.go, line 308
if envToken := os.Getenv("HEY_TOKEN"); envToken != "" {
internal/cmd/doctor.go, line 107
case os.Getenv("HEY_TOKEN") != "":
internal/cmd/setup.go, line 324
if os.Getenv("HEY_TOKEN") != "" {
internal/auth/store.go, line 191
return filepath.Join(s.fallbackDir, "credentials.json")
internal/auth/store_test.go, line 546
info, err := os.Stat(filepath.Join(s.fallbackDir, "credentials.json"))
internal/cmd/auth_commands_test.go, line 159
if err := os.WriteFile(filepath.Join(configDir, "credentials.json"), []byte("not-json"), 0600); err != nil {
internal/cmd/auth_commands_test.go, line 183
if err := os.WriteFile(filepath.Join(configDir, "credentials.json"), []byte("not-json"), 0600); err != nil {
internal/cmd/doctor_test.go, line 38
if err := os.WriteFile(filepath.Join(configDir, "credentials.json"), []byte("not-json"), 0600); err != nil {
internal/cmd/root.go, line 433
// to the new credential store (keyring or credentials.json).
internal/cmd/root_test.go, line 356
credentialsPath := filepath.Join(home, "hey-cli", "credentials.json")
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
internal/mcpserver/model/openapi.json, line 1
{
internal/tui/calendar_test.go, line 1
package tui
internal/cmd/testdata/selfupdate/checksums.txt.bundle, line 1
{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json", "verificationMaterial":{"certificate":{"rawBytes":"MIIG9TCCBnygAwIBAgIUUOIV+Z4Qpn6BVK2dv1qa0PLab7UwCgYIKoZIzj0EAwMwNzE
Show more
internal/cmd/testdata/selfupdate/trusted_root.json, line 43
"rawBytes": "MIIB+DCCAX6gAwIBAgITNVkDZoCiofPDsy7dfm6geLbuhzAKBggqhkjOPQQDAzAqMRUwEwYDVQQKEwxzaWdzdG9yZS5kZXYxETAPBgNVBAMTCHNpZ3N0b3JlMB4XDTIxMDMwNzAzMjAyOVoXDTMxMDIyMzAzMjAyOVowKjE
internal/cmd/testdata/selfupdate/trusted_root.json, line 61
"rawBytes": "MIICGjCCAaGgAwIBAgIUALnViVfnU0brJasmRkHrn/UnfaQwCgYIKoZIzj0EAwMwKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0yMjA0MTMyMDA2MTVaFw0zMTEwMDUxMzU2NThaMDc
internal/cmd/testdata/selfupdate/trusted_root.json, line 64
"rawBytes": "MIIB9zCCAXygAwIBAgIUALZNAPFdxHPwjeDloDwyYChAO/4wCgYIKoZIzj0EAwMwKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0yMTEwMDcxMzU2NTlaFw0zMTEwMDUxMzU2NThaMCo
internal/cmd/testdata/selfupdate/trusted_root.json, line 114
"rawBytes": "MIICEDCCAZagAwIBAgIUOhNULwyQYe68wUMvy4qOiyojiwwwCgYIKoZIzj0EAwMwOTEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MSAwHgYDVQQDExdzaWdzdG9yZS10c2Etc2VsZnNpZ25lZDAeFw0yNTA0MDgwNjU5NDNaFw0
internal/cmd/testdata/selfupdate/trusted_root.json, line 117
"rawBytes": "MIIB9zCCAXygAwIBAgIUV7f0GLDOoEzIh8LXSW80OJiUp14wCgYIKoZIzj0EAwMwOTEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MSAwHgYDVQQDExdzaWdzdG9yZS10c2Etc2VsZnNpZ25lZDAeFw0yNTA0MDgwNjU5NDNaFw0
Licence
Pass
A licence file is present (LICENSE.md).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit c5fe278682c7. requests shell access. The manifest names this permission. install fetches a script from the network. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: c5fe278682c7361385d342b37eeeb2c727b04f4e
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.