Claude Code, Skill
Okf Skills
The OKF toolkit for Claude Code — author, maintain, validate & visualize Open Knowledge Format bundles.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 9919c161a7f0.
PERMISSION_DELETE_FILES OBFUSCATION_FILE_OVER_READ_CAP
Why this grade
- PERMISSION_DELETE_FILES Low
Contains a call that can delete files.
benchmark/gate/pipeline.py, line 237
completed = subprocess.run(command, cwd=run.root, capture_output=True, text=True, - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
benchmark/gate/runs/endtoend.jsonl, line 1
{"stage": "endtoend", "item": "default-flipped-04", "shape": "default-flipped", "arm": "nogate", "rep": 0, "impl_updated": true, "impl_still_old": false, "doc_synced": false, "doc_
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
benchmark/gate/pipeline.py, line 237
completed = subprocess.run(command, cwd=run.root, capture_output=True, text=True,
benchmark/gate/pipeline.py, line 374
completed = subprocess.run(command, cwd=run.root, capture_output=True, text=True,
benchmark/gate/pipeline.py, line 469
shutil.rmtree(run.root, ignore_errors=True)
Show more
benchmark/map-tier/bench_truth.py, line 24
out = subprocess.run(cmd, capture_output=True, text=True, check=True).stdout
benchmark/trust/run.py, line 569
completed = subprocess.run(
skills/backfill/scripts/okf_backfill_events.py, line 157
result = subprocess.run(
skills/backfill/scripts/okf_backfill_events.py, line 171
result = subprocess.run(
skills/backfill/scripts/okf_backfill_events.py, line 190
log_result = subprocess.run(
skills/backfill/scripts/okf_backfill_events.py, line 197
numstat_result = subprocess.run(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Pass
No read of a credential file or secret environment variable found.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
benchmark/gate/runs/endtoend.jsonl, line 1
{"stage": "endtoend", "item": "default-flipped-04", "shape": "default-flipped", "arm": "nogate", "rep": 0, "impl_updated": true, "impl_still_old": false, "doc_synced": false, "doc_
benchmark/gate/runs/states.jsonl, line 1
{"stage": "consumer", "item": "default-flipped-04", "shape": "default-flipped", "state": "stale_unmarked", "rep": 1, "answer": "infrequent", "grade": "fresh", "session_id": "20d617
benchmark/trust/runs/calibration/B0.jsonl, line 1
{"item": "changed-precedence-04", "shape": "changed-precedence", "arm": "B0", "rep": 0, "assembly_seed": 4288797920, "answer": "unknown", "grade": "neither", "response_id": "b5343f
Show more
benchmark/trust/runs/measurement/A0.jsonl, line 1
{"item": "changed-precedence-10", "shape": "changed-precedence", "arm": "A0", "rep": 0, "assembly_seed": 2990800545, "answer": "The registry", "grade": "fresh", "response_id": "808
benchmark/trust/runs/measurement/A1.jsonl, line 1
{"item": "changed-precedence-10", "shape": "changed-precedence", "arm": "A1", "rep": 0, "assembly_seed": 399011503, "answer": "the registry", "grade": "fresh", "response_id": "fe79
benchmark/trust/runs/measurement/B0.jsonl, line 1
{"item": "default-flipped-03", "shape": "default-flipped", "arm": "B0", "rep": 2, "assembly_seed": 2001671146, "answer": "http/1.1", "grade": "stale", "response_id": "fe99576c-e7e8
benchmark/trust/runs/measurement/B1.jsonl, line 1
{"item": "changed-precedence-10", "shape": "changed-precedence", "arm": "B1", "rep": 2, "assembly_seed": 194110075, "answer": "the leader", "grade": "stale", "response_id": "3695a0
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 9919c161a7f0. can delete files. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 9919c161a7f0dd99a0ecb736efa3fa9e0c9da297
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.