Claude Code, Skill
R Doc
R Doc, a skill listed in the PlugVet directory.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit bc23420d7df5, unchanged since the check below.
SECRETS_PATH_DOTENV PERMISSION_SHELL_DECLARED OBFUSCATION_FILE_OVER_READ_CAP
Why this grade
- SECRETS_PATH_DOTENV Low
Mentions a .env file.
benchmarks/capture_codex.py, line 110
(root / ".env").write_text("TOKEN=redacted-placeholder\n", encoding="utf-8") - PERMISSION_SHELL_DECLARED Note
Runs shell commands, and the manifest or description says so.
benchmarks/capture_codex.py, line 193
completed = subprocess.run( - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
benchmarks/naturalistic-runs-20260919-luna/public-evidence.json, line 1
{
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
benchmarks/capture_codex.py, line 193
completed = subprocess.run(
benchmarks/naturalistic/capture_codex.py, line 771
completed = subprocess.run(
benchmarks/naturalistic/grader.py, line 393
completed = subprocess.run(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
benchmarks/capture_codex.py, line 110
(root / ".env").write_text("TOKEN=redacted-placeholder\n", encoding="utf-8")
benchmarks/naturalistic/capture_codex.py, line 35
"protected paths such as `.env`, `.env.*`, `secrets.*`, credentials, private keys, "
benchmarks/naturalistic/capture_codex.py, line 204
protected_markers = (".env", "secret", "credential", "private", ".key", ".pem", ".pfx", "cert")
Show more
CHANGELOG.md, line 58
- 增强 r-doc 的运行时读取边界：要求先枚举路径再按显式范围读取，禁止从项目根目录进行宽范围内容扫描，并将 `.env`、secrets、凭据、密钥和证书路径设为保护对象；用于降低文档治理任务中的无关/敏感读取。
CHANGELOG.md, line 60
- 将 naturalistic runner 的安全读取边界提升为两种条件共用的 preflight 契约：明确保护 `.env`、secrets、凭据、密钥和证书路径，并禁止从项目根执行 `rg --hidden` 等无限制内容扫描；旧批次不重写，新批次使用新的 preflight 版本标识。
CHANGELOG.md, line 64
- 完成新 runner 的完整 `gpt-5.6-luna` A/B 批次：API、CLI、SQL、Event v2 各 10 对，共 80 次运行；79/80 通过，唯一失败为 SQL baseline 读取 `.env` 的 forbidden-read，activation 未验证为 0/80，四类任务均达到 10 对强证据数量门槛。该结果验证了可复
CHANGELOG.md, line 65
- 修复 naturalistic runner 的命令读取归因假阳性：嵌套 PowerShell 引号中的 `rg --glob '!*.env'` 等保护路径排除参数不再被当作实际读取；runner 协议升级为 `skill-discovery-safe-read-preflight-v2-command-glob`，旧 v1 证据保持不可变。
CHANGELOG.md, line 76
- r-doc now defines a bounded runtime read policy: enumerate paths before reading, keep content searches scoped to explicit roots, and protect `.env`, secrets, credentials, keys, a
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
benchmarks/naturalistic-runs-20260919-luna/public-evidence.json, line 1
{
benchmarks/naturalistic-runs-20260919-luna-v0.3.0-rerun/public-evidence.json, line 1
{
benchmarks/naturalistic-runs-20260920-luna-v0.3.0-full-v7-event-v2/public-evidence.json, line 1
{
Show more
benchmarks/naturalistic-runs-20260920-luna-v0.3.0-full-v8-command-glob-event-v2/public-evidence.json, line 1
{
benchmarks/naturalistic-runs-20260920-luna-v0.4.0-full-v1-complex/public-evidence.json, line 1
{
benchmarks/naturalistic-runs-20260920-luna-v0.4.0-full-v1-complex/summary.json, line 1
{
benchmarks/naturalistic-runs-20260920-luna-v0.4.0-full-v2-contracts-regraded-v1/public-evidence.json, line 1
{
benchmarks/naturalistic-runs-20260920-luna-v0.4.0-full-v2-contracts-regraded-v1/summary.json, line 1
{
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit bc23420d7df5. requests shell access. The manifest names this permission. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: bc23420d7df5ec1d2c5fb45e066c919790ab9cf9
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.