Claude Code, Skill
Satori
Clinically informed wisdom companion for the inner life — emotions, grief, meaning, burnout, relationship conflict, shadow work, and existential crossroads.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 85db2a724738.
OBFUSCATION_MINIFIED_PAYLOAD
Why this grade
- OBFUSCATION_MINIFIED_PAYLOAD Medium
Contains a very long line with almost no spaces in a script or style file.
scripts/run_evals.py, line 53
r'(?:\b(?:code|coding|script|function|query|sql|database|table|postgres|postgresql|mysql|sqlite|redis|kafka|docker|dockerfile|kubernetes|k8s|pod|container|aws|s3|gcp|azure|terrafor
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
scripts/build_release.py, line 184
proc = subprocess.run([sys.executable, str(validate_script)], capture_output=True, text=True)
scripts/satori_memory.py, line 81
subprocess.run(
scripts/satori_memory.py, line 604
shutil.rmtree(vault_dir, onexc=_on_rm_error)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/run_evals.py, line 393
with urllib.request.urlopen(req, timeout=30) as resp:
scripts/run_evals.py, line 437
with urllib.request.urlopen(req, timeout=20) as resp:
scripts/run_evals.py, line 493
with urllib.request.urlopen(req, timeout=30) as resp:
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
scripts/run_evals.py, line 298
"""Retrieve environment variable from os.environ, .env files, or Windows User Registry."""
scripts/run_evals.py, line 302
for p in [ROOT_DIR / ".env", pathlib.Path.home() / ".env"]:
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains a minified payload.
OBFUSCATION_MINIFIED_PAYLOAD
scripts/run_evals.py, line 53
r'(?:\b(?:code|coding|script|function|query|sql|database|table|postgres|postgresql|mysql|sqlite|redis|kafka|docker|dockerfile|kubernetes|k8s|pod|container|aws|s3|gcp|azure|terrafor
scripts/run_evals.py, line 58
r'\b(?:burnout|burned\s+out|exhausted|exhausting|exhaustion|imposter|impostor|fraud|stupid|inadequate|failure|failing|quit|fired|layoff|layoffs|shaking|panic|crying|tears|sob|dread
scripts/run_evals.py, line 63
r'\b(?:suicide|kill\s+myself|kill\s+me|end\s+my\s+life|end\s+it\s+all|better\s+off\s+(?:if\s+i\s+were\s+)?dead|want\s+to\s+die|wish\s+i\s+(?:wouldn\'t|were)\s+dead|hang\s+myself|ro
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 85db2a724738. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. contains a minified payload.
Date and source
Date checked:
github.com
Commit graded: 85db2a724738f67046728694f8a4d7e980b74cf2
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.