Grades are a hygiene check, not a security guarantee.

Claude Code, Skill

Kids26 Team6

Recurring fixes, workarounds, and analysis steps often survive only in one person's memory or terminal history.

Compatibility: Not stated.

Grade C

One Medium finding. Read the report before installing.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

SECRETS_PATH_CREDENTIAL

Why this grade

  • SECRETS_PATH_CREDENTIAL Medium

    Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).

    src/wfrec/remote.py, line 4 reimplement SSH.** ``paramiko`` does not honour ``~/.ssh/config`` ``Match``/

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Concern

    can delete files.

    PERMISSION_DELETE_FILES

    skills/setup-activity-tracking/scripts/verify_install.py, line 103

    result = subprocess.run(

    skills/setup-activity-tracking/scripts/verify_install.py, line 180

    result = subprocess.run(

    skills/skill-forge/assets/record_run.py, line 625

    process = subprocess.Popen(

    Show more

    skills/skill-forge/scripts/inspect_code_dependencies.py, line 163

    "subprocess.call",

    skills/skill-forge/scripts/inspect_code_dependencies.py, line 164

    "subprocess.check_call",

    skills/skill-forge/scripts/inspect_code_dependencies.py, line 165

    "subprocess.check_output",

    skills/skill-forge/scripts/inspect_code_dependencies.py, line 166

    "subprocess.Popen",

    skills/skill-forge/scripts/inspect_code_dependencies.py, line 167

    "subprocess.run",

    src/wfrec/seal.py, line 595

    shutil.rmtree(seal_dir(session_dir), ignore_errors=True)

    src/wfrec/seal.py, line 610

    shutil.rmtree(seal_dir(session_dir), ignore_errors=True)

    src/wfrec/seal.py, line 1099

    shutil.rmtree(seal_dir(session_dir), ignore_errors=True)

    src/wfrec/seal.py, line 1252

    shutil.rmtree(seal_dir(session_dir), ignore_errors=True)

    src/wfrec/seal.py, line 1275

    shutil.rmtree(seal_dir(session_dir), ignore_errors=True)

  • Install and update

    Pass

    No install-time script found, and dependencies are pinned or absent.

  • Network

    Concern

    can reach a host that is not written as a fixed address.

    NETWORK_NO_FIXED_HOST

    skills/setup-activity-tracking/scripts/install_dependencies.sh, line 149

    curl --proto '=https' --tlsv1.2 --fail --silent --show-error \

    skills/setup-activity-tracking/scripts/install_dependencies.sh, line 240

    for command_name in bash curl grep tar xz awk; do

    src/autocab/deid/eval/generate.py, line 575

    "$ curl -s {url} -o chart.json # {benchmark} unaffected",

    Show more

    src/wfrec/client.py, line 53

    response = httpx.request(

    src/wfrec/daemon.py, line 41

    response = httpx.get(f"{url}/health", timeout=timeout)

    src/wfrec/daemon.py, line 249

    response = httpx.get(health, timeout=1.0)

    src/wfrec/ui/app.js, line 126

    const res = await fetch(path, {method:requestMethod, headers:H,

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

    src/autocab/deid/config.py, line 18

    There is deliberately **no dotenv dependency and no ``.env`` autoload from the

    src/wfrec/remote.py, line 4

    reimplement SSH.** ``paramiko`` does not honour ``~/.ssh/config`` ``Match``/

    .gitignore, line 3

    *.DS_Store

    Show more

    .gitignore, line 4

    .env

    .gitignore, line 6

    !.env.example

    .gitignore, line 131

    # Environments

    docs/mgatta42/plan.md, line 230

    - `wfrec ssh <host>` wraps the user's own `ssh` and `~/.ssh/config`, and never opens connections beyond the one interactive session plus one pull-back - so ControlMaster and Duo/2F

    docs/mgatta42/pland2-build.md, line 37

    9. **Credential presence is never a gate layer.** No keys in config, no dotenv, no `.env` autoload.

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Note

    a file was over the read cap and was not fully read.

    OBFUSCATION_FILE_OVER_READ_CAP

    uv.lock, line 1

    version = 1

  • Licence

    Pass

    A licence file is present (LICENSE.md).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 8c87e25bfa44. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked:

View source

github.com

Commit graded: 8c87e25bfa44fda7203d133c0df3f76f6bfe29e6

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen