Claude Code, Plugin
mindex
A coding agent should not read your codebase.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 1afbce6c4f91, unchanged since the check below.
OBFUSCATION_ENCODED_BLOB
Why this grade
- OBFUSCATION_ENCODED_BLOB Medium
Contains a long base64 shaped string in a file that should be readable.
deploy/grafana/mindex-service.json, line 1
{
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
bench/build_docs_qrels.py, line 161
return subprocess.run(
bench/build_ident_qrels.py, line 245
proc = subprocess.run(
bench/build_ident_qrels.py, line 291
proc = subprocess.run(
Show more
bench/build_qrels.py, line 193
proc = subprocess.run(
bench/build_qrels.py, line 209
proc = subprocess.run(
bench/fetch.py, line 45
proc = subprocess.run(
bench/noise_floor.py, line 121
proc = subprocess.run(cmd, check=False)
bench/publish.py, line 141
result = subprocess.run(cmd, capture_output=True, text=True, check=False)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
bench/fetch.py, line 85
with urllib.request.urlopen(req, timeout=300) as resp, tmp.open("wb") as out:
bench/slicer_sweep.py, line 96
r = httpx.get(f"https://{BIND}/health", verify=False, timeout=3)
bench/slicer_sweep.py, line 213
stats = httpx.get(
Show more
perf/run.sh, line 104
for dep in k6 jq curl awk; do
perf/run.sh, line 129
curl -sk --max-time 5 "$mindex_url/health" >/dev/null 2>&1 || {
perf/run.sh, line 134
curl -s --max-time 5 "$embedder_url/health" >/dev/null 2>&1 || {
perf/run.sh, line 159
# It rides on every curl below and is passed to k6 through the environment.
perf/run.sh, line 182
curl -sk --max-time 10 "${auth_header[@]}" "$1" 2>/dev/null | jq -r "$2 // \"$3\"" 2>/dev/null || echo "$3"
docker-compose.test.yml, line 28
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:11211/docs')"]
docker-compose.test.yml, line 37
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:11434/docs')"]
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
deploy/embedder/server.py, line 96
TOKEN_BUDGET = int(os.environ.get("MINDEX_EMBED_TOKEN_BUDGET", "16384"))
tools/mcp/mindex/src/mindex/server.py, line 74
token = (os.environ.get("MINDEX_TOKEN") or "").strip()
tools/mcp/mindex/src/mindex/server.py, line 76
path = (os.environ.get("MINDEX_TOKEN_FILE") or "").strip()
Show more
tools/mcp/scout/src/scout/server.py, line 299
token = (os.environ.get("MINDEX_TOKEN") or "").strip()
tools/mcp/scout/src/scout/server.py, line 301
path = (os.environ.get("MINDEX_TOKEN_FILE") or "").strip()
.claude/CLAUDE.md, line 2429
env; swap profiles via `--env-file perf/env/<f>.env`). **No host ports**;
.env.example, line 3
# Copy to a profile (e.g. perf/env/baseline.env) or to .env, then:
.env.example, line 5
# A plain .env in this directory is loaded automatically by `docker compose up`.
CHANGELOG.md, line 242
`perf/env/*.env`, against `11211` everywhere else), recorded eight columns from the
CHANGELOG.md, line 427
the gateway's. `/.env`, `/js/config.js` and `/` still get 444, and a banned address gets
deploy/gate/mindex.nginx.conf, line 140
# what to do. A request to /.env, /js/config.js or / is a caller to say nothing
docker-compose.yml, line 4
# swaps in with `docker compose --env-file perf/env/<f>.env up -d` (see .env.example).
docker-compose.yml, line 39
# The perf-tunable flags read from the environment (see .env.example and
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
deploy/grafana/mindex-service.json, line 1
{
perf/analyze.ipynb, line 1
{
src/research.rs, line 1
//! The `/research` loop: a local Ollama thinking model iteratively queries the
Show more
src/backend/v0/handlers.rs, line 1
use std::collections::HashMap;
tools/vscode/package-lock.json, line 1
{
perf/analyze.ipynb, line 431
"image/png": "iVBORw0KGgoAAAANSUhEUgAABQkAAAG4CAYAAADmJ2E2AAAAOnRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjExLjAsIGh0dHBzOi8vbWF0cGxvdGxpYi5vcmcvlcelbwAAAAlwSFlzAAAPYQAAD2EBqD+naQ
perf/analyze.ipynb, line 467
"image/png": "iVBORw0KGgoAAAANSUhEUgAAAxMAAAIcCAYAAACNe/MxAAAAOnRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjExLjAsIGh0dHBzOi8vbWF0cGxvdGxpYi5vcmcvlcelbwAAAAlwSFlzAAAPYQAAD2EBqD+naQ
perf/analyze.ipynb, line 515
"image/png": "iVBORw0KGgoAAAANSUhEUgAABM0AAAG4CAYAAABW/RAtAAAAOnRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjExLjAsIGh0dHBzOi8vbWF0cGxvdGxpYi5vcmcvlcelbwAAAAlwSFlzAAAPYQAAD2EBqD+naQ
perf/analyze.ipynb, line 565
"image/png": "iVBORw0KGgoAAAANSUhEUgAAAxYAAAHqCAYAAACZcdjsAAAAOnRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjExLjAsIGh0dHBzOi8vbWF0cGxvdGxpYi5vcmcvlcelbwAAAAlwSFlzAAAPYQAAD2EBqD+naQ
perf/analyze.ipynb, line 606
"image/png": "iVBORw0KGgoAAAANSUhEUgAABQoAAAHWCAYAAAA/7rQfAAAAOnRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjExLjAsIGh0dHBzOi8vbWF0cGxvdGxpYi5vcmcvlcelbwAAAAlwSFlzAAAPYQAAD2EBqD+naQ
perf/analyze.ipynb, line 679
"image/png": "iVBORw0KGgoAAAANSUhEUgAABQkAAAG4CAYAAADmJ2E2AAAAOnRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjExLjAsIGh0dHBzOi8vbWF0cGxvdGxpYi5vcmcvlcelbwAAAAlwSFlzAAAPYQAAD2EBqD+naQ
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 1afbce6c4f91. requests shell access. The manifest names this permission. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: 1afbce6c4f912cdf2cff4cc7ab196c0ec155f446
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.