Claude Code, Skill
Last Vibe Bender
Recruit other providers' coding CLIs (Claude Code, Codex, Antigravity agy, or any CLI with a resume flag) as tracked, persistent sub-agents from a single orchestrator.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
vibelib/approvals.py, line 17
CREDENTIAL = re.compile(r"(\.env\b|(?<![A-Za-z])token(?![A-Za-z])|\bsecret|\bpassword|\bpasswd|\bkeychain|auth\.json|credentials|id_rsa|\.pem\b|api[_-]?key)", re.I)
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
install.py, line 22
if d.exists(): shutil.rmtree(d)
vibelib/approvals.py, line 15
Invoke-WebRequest|iwr|Invoke-RestMethod|Invoke-Expression|iex|certutil|bitsadmin|Start-BitsTransf
vibelib/procs.py, line 36
"""subprocess.run for agent CLIs: resolves argv[0] through shutil.which (so npm .cmd shims
Show more
vibelib/procs.py, line 50
return subprocess.run(cmd, **kw)
vibelib/runner.py, line 205
p = subprocess.Popen(cmd, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, stdin=subprocess.DEVNULL, cwd=str(project.root), **kw)
vibelib/runner.py, line 248
r = subprocess.run(["tasklist", "/FI", f"PID eq {pid}", "/NH"], capture_output=True, text=True, timeout=15)
vibelib/verify.py, line 39
r = subprocess.run(c["run"], shell=True, cwd=str(project.root), capture_output=True, text=True, timeout=c.get("timeout", 300))
docs/superpowers/plans/2026-09-06-last-vibe-bender.md, line 282
out = subprocess.run(cmd, capture_output=True, text=True, cwd=tmp_path).stdout
docs/superpowers/plans/2026-09-06-last-vibe-bender.md, line 290
run = lambda prompt: a.parse_output(subprocess.run(a.render(a.run, model="mock-fast", effort="low", prompt=prompt, timeout="60s", project=str(tmp_path), report_file="r.md"), captur
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL
vibelib/approvals.py, line 17
CREDENTIAL = re.compile(r"(\.env\b|(?<![A-Za-z])token(?![A-Za-z])|\bsecret|\bpassword|\bpasswd|\bkeychain|auth\.json|credentials|id_rsa|\.pem\b|api[_-]?key)", re.I)
README.md, line 110
| credential | `.env`, tokens, secrets, `id_rsa`, API keys, ... | user only |
docs/superpowers/plans/2026-09-06-last-vibe-bender.md, line 1181
("cat .env", "credential"), ("echo $GITHUB_TOKEN", "credential"), ("type C:/proj/auth.json", "credential"),
Show more
docs/superpowers/plans/2026-09-06-last-vibe-bender.md, line 1264
CREDENTIAL = re.compile(r"(\.env\b|\btoken\b|\bsecret|\bpassword|\bpasswd|\bkeychain|auth\.json|credentials|id_rsa|\.pem\b|api[_-]?key)", re.I)
docs/superpowers/specs/2026-09-06-last-vibe-bender-design.md, line 247
| `credential` | mentions `.env|token|secret|password|keychain|auth.json|id_rsa|api_key` | user |
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 087d7175997c. can delete files. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: 087d7175997cfccc9bfcbe155c44a0d02367b60c
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.