Claude Code, Skill
Ready Agent 1
Ready Agent 1 — is your codebase ready for the agents?
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
engine/readiness/checks/_agent_policy.py, line 64
r"(?:read|cat|less|more|head|tail|view)\([^)]*(?:\.env|\.pem|\.key|id_rsa|id_ed25519|"
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
ci/run_engine.py, line 49
proc = subprocess.run(["python3", *argv], capture_output=True, text=True)
engine/readiness/process.py, line 461
proc = subprocess.Popen(
engine/readiness/collectors/exec.py, line 79
shutil.rmtree(self._copy_dir, ignore_errors=True)
Show more
engine/readiness/collectors/github.py, line 165
shutil.rmtree(self._cwd_dir, ignore_errors=True)
evals/coverage_gate.py, line 44
result = subprocess.run(["git", *args], cwd=cwd, capture_output=True, text=True)
evals/fixtures.py, line 62
subprocess.run(args, cwd=dest, capture_output=True, timeout=30, check=True)
evals/runner.py, line 50
p = subprocess.run(["gemini", "--approval-mode", "plan", "-p", prompt],
evals/runner.py, line 57
p = subprocess.run(["codex", "exec", "--skip-git-repo-check", "-s", "read-only", "-"],
scripts/check_release_versions.py, line 181
subprocess.run(["git", "fetch", "--quiet", "origin", "main"],
scripts/check_release_versions.py, line 183
subprocess.run(["git", "fetch", "--quiet", "--tags", "origin", "main"],
skills/ra1-fix/scripts/readiness/collectors/exec.py, line 79
shutil.rmtree(self._copy_dir, ignore_errors=True)
skills/ra1-fix/scripts/readiness/collectors/github.py, line 165
shutil.rmtree(self._cwd_dir, ignore_errors=True)
skills/ra1-interview/scripts/readiness/collectors/exec.py, line 79
shutil.rmtree(self._copy_dir, ignore_errors=True)
skills/ra1-interview/scripts/readiness/collectors/github.py, line 165
shutil.rmtree(self._cwd_dir, ignore_errors=True)
skills/ra1-report/scripts/readiness/collectors/exec.py, line 79
shutil.rmtree(self._copy_dir, ignore_errors=True)
skills/ra1-report/scripts/readiness/collectors/github.py, line 165
shutil.rmtree(self._cwd_dir, ignore_errors=True)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
engine/readiness/checks/_agent_policy.py, line 64
r"(?:read|cat|less|more|head|tail|view)\([^)]*(?:\.env|\.pem|\.key|id_rsa|id_ed25519|"
engine/readiness/checks/_agent_policy.py, line 73
r"send|post)\([^)]*(?:\.env\b|\.env\.\w|\.pem\b|\.key\b|id_rsa|id_ed25519|\.ssh\b|"
engine/readiness/checks/_agent_policy.py, line 79
r"(?:\.env\b|\.env\.\w|\.env\*|secrets?\b|credentials?\b|tokens?\b)")),
Show more
engine/readiness/checks/_agent_policy.py, line 81
r"(?i)(?:\.pem\b|\*\.pem|\.key\b|\*\.key|id_rsa|id_ed25519)")),
engine/readiness/checks/_agent_policy.py, line 199
has_targets = bool(re.search(r"(?i)(\.env|\.pem|\.key|id_rsa|id_ed25519|\.ssh|\.aws|"
engine/readiness/checks/devenv.py, line 18
files = aglob(ctx, [".env.example", ".env.template", ".env.sample", "env.example", ".env.dist"])
engine/readiness/checks/devenv.py, line 21
return failed("No environment template (.env.example).")
engine/readiness/checks/loop.py, line 68
r"(?i)(secret|credential|environment (file|variable)|\.env|token|private key|"
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
the file cap was reached before every file was read.
OBFUSCATION_FILE_CAP_REACHED
tests/test_model2.py, line 1
"""Branch-focused tests for readiness.model validators, sanitizers, and finalizers.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 8649a26a3799. can delete files. reads a credential or environment file. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 8649a26a3799b63608b428b98f39b30ac13da990
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.