Claude Code, Skill
Qadrillion Agent
Qadrillion Agent Give your coding agent a QA workflow it can execute. Investigate risk.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_HOST_FROM_INPUT PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL
Why this grade
- NETWORK_HOST_FROM_INPUT High
A file takes a URL or endpoint as input and has no fixed host list.
docs/evidence/qa-specialists/review-round1/cleanup-probe.py, line 22
with urllib.request.urlopen(request,timeout=2) as response:remaining[actor]=json.load(response) - PERMISSION_SHELL_UNDECLARED Medium
Runs shell commands that the manifest or description does not mention.
docs/evidence/qa-specialists/mobile/authored-test.py, line 31
result = subprocess.run(command, capture_output=True, timeout=35) - SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
.agent/hooks/guard-read.sh, line 46
r"(^|/)(id_rsa|id_ed25519)[^/]*($|/)",
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
requests shell access. No manifest field names shell or command execution.
PERMISSION_SHELL_UNDECLARED
docs/evidence/qa-specialists/mobile/authored-test.py, line 31
result = subprocess.run(command, capture_output=True, timeout=35)
docs/evidence/qa-specialists/review-round1/cleanup-probe.py, line 17
result=subprocess.run(command,cwd=args.out,env=env,text=True,capture_output=True,timeout=90)
.agent/hooks/checkpoint-state.sh, line 56
listing = subprocess.run(
Show more
.agent/hooks/guard-read.sh, line 60
match = subprocess.run(["grep", "-qE", "-e", protected], input=candidate,
docs/evidence/qa-specialists/routing-attempt1/mobile/events.jsonl, line 13
{"type":"item.completed","item":{"id":"item_5","type":"command_execution","command":"/bin/zsh -lc \"cat fixtures/CONTRACT.md tools/workspace/refresh.py tools/tickets/validate.py to
docs/evidence/qa-specialists/routing-attempt1/ordinary/events.jsonl, line 13
{"type":"item.completed","item":{"id":"item_5","type":"command_execution","command":"/bin/zsh -lc \"cat fixtures/CONTRACT.md; ls -la fixtures; cat docs/reference/integrations.md; s
docs/evidence/qa-specialists/routing-attempt1/ordinary/events.jsonl, line 17
{"type":"item.started","item":{"id":"item_8","type":"command_execution","command":"/bin/zsh -lc \"mkdir -p tickets artifacts/LOCAL-1 docs/sessions\npython3 - <<'PY'\nimport hashlib
docs/evidence/qa-specialists/routing-attempt1/ordinary/events.jsonl, line 18
{"type":"item.completed","item":{"id":"item_8","type":"command_execution","command":"/bin/zsh -lc \"mkdir -p tickets artifacts/LOCAL-1 docs/sessions\npython3 - <<'PY'\nimport hashl
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
docs/evidence/qa-specialists/review-round1/cleanup-probe.py, line 22
with urllib.request.urlopen(request,timeout=2) as response:remaining[actor]=json.load(response)
tools/specialists/lab.py, line 31
const response = await fetch('/orders', {method:'POST', headers:{
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.agent/hooks/guard-read.sh, line 46
r"(^|/)(id_rsa|id_ed25519)[^/]*($|/)",
.agent/hooks/guard-read.sh, line 80
if re.search(r"\.env($|[./])", candidate):
.agent/hooks/guard-shell.sh, line 68
SECRET_FILES='(\.env(\.[a-z]+)?\b|id_rsa|id_ed25519|\.pem\b|\.p12\b|\.keystore\b|credentials|\.netrc|\.npmrc|\.pypirc|\.codex/auth\.json|\.aws/|\.ssh/|Keychains?|mcp\.json|accounts
Show more
.agent/hooks/guard-shell.sh, line 76
r"(^|/)(id_rsa|id_ed25519)[^/]*($|/)", r"\.(pem|p12|keystore|jks|pfx)$",
.agent/hooks/guard-shell.sh, line 95
if not candidate.endswith((".example", ".template", ".sample")) and re.search(r"\.env($|[./])", candidate):
.agent/hooks/guard-shell.sh, line 387
m '(\.env|secret|token|password|credential|PMAK|PAT)[^|;&]*\|[^|;&]*(curl|wget|nc)\b' \
.github/pull_request_template.md, line 17
- [ ] No secrets committed (`.env`, `mcp.json`, pools, tokens)
.gitignore, line 5
# Credentials - never committed. Templates end in .example and are allowed by the read hook.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
docs/evidence/qa-specialists/mobile/comparison-run/test_activity_recreation/commands.jsonl, line 1
{"utc": "2026-09-24T09:13:35.745525+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5560", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/mobile/comparison-run/test_process_termination_relaunch/commands.jsonl, line 1
{"utc": "2026-09-24T09:14:44.743027+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5560", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/mobile/diagnostic-recreation/test_activity_recreation/commands.jsonl, line 1
{"utc": "2026-09-24T09:11:23.636174+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5560", "shell", "pm", "clear", "com.qadrillion.parcel"],
Show more
docs/evidence/qa-specialists/mobile/first-run/test_activity_recreation/commands.jsonl, line 1
{"utc": "2026-09-24T08:57:01.634096+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5560", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/mobile/first-run/test_process_termination_relaunch/commands.jsonl, line 1
{"utc": "2026-09-24T08:58:09.448339+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5560", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/mobile-portability/baseline-execution/test_activity_recreation/commands.jsonl, line 1
{"utc": "2026-09-24T09:47:20.705092+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5562", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/mobile-portability/baseline-execution/test_process_termination_relaunch/commands.jsonl, line 1
{"utc": "2026-09-24T09:47:47.282361+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5562", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/mobile-portability/seeded-execution/test_activity_recreation/commands.jsonl, line 1
{"utc": "2026-09-24T09:45:38.130955+00:00", "argv": ["<user-home>/Library/Android/sdk/platform-tools/adb", "-s", "emulator-5562", "shell", "pm", "clear", "com.qadrillion.parcel"],
docs/evidence/qa-specialists/review-round1/corrected/result.json, line 138
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjA1MGExMmU5LTVjYjQtNGIwMi05YzJiLTg0ZWEyNTB
docs/evidence/qa-specialists/review-round1/final-corrected/result.json, line 138
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjZmNjhmZmU1LTIzNGQtNDc5ZC1hYjFjLTliODNhYTc
docs/evidence/qa-specialists/review-round1/original/result.json, line 122
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjQ5NjEyM2I3LWMyNGItNDQzNy05YjljLWViZmFkYmF
docs/evidence/qa-specialists/web/parcel-1790241098869/chromium.json, line 103
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjI4YmQ0ZjBlLTQ5MmQtNDFiYS05Y2JkLTlkNmVmMzB
docs/evidence/qa-specialists/web/parcel-1790241098869/chromium.json, line 148
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjI4YmQ0ZjBlLTQ5MmQtNDFiYS05Y2JkLTlkNmVmMzB
docs/evidence/qa-specialists/web/parcel-1790241098869/chromium.json, line 193
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjI4YmQ0ZjBlLTQ5MmQtNDFiYS05Y2JkLTlkNmVmMzB
docs/evidence/qa-specialists/web/parcel-1790241098869/firefox.json, line 103
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjI4YmQ0ZjBlLTQ5MmQtNDFiYS05Y2JkLTlkNmVmMzB
docs/evidence/qa-specialists/web/parcel-1790241098869/firefox.json, line 148
"body": "ewogICJpZGVudGl0eSI6IHsKICAgICJmaXh0dXJlIjogInFhZHJpbGxpb24tc3BlY2lhbGlzdC1sYWIiLAogICAgInJvbGUiOiAidGVzdCIsCiAgICAicnVuX2lkIjogIjI4YmQ0ZjBlLTQ5MmQtNDFiYS05Y2JkLTlkNmVmMzB
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 76fab35f33fa. requests shell access. No manifest field names shell or command execution. accepts a host from input, with no fixed list in this file. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: 76fab35f33faacb80fd910a3840f4fba4ec44a27
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.