Claude Code, Plugin
Se Harness
Bootstrap an AI-agentic SDLC harness around any software project — new or existing, any stack, single- or multi-repo.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 85d5487d90d4, unchanged since the check below.
INSTALL_REMOTE_SCRIPT
Why this grade
- INSTALL_REMOTE_SCRIPT High
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
plugins/se-harness/commands/harness-mem-codebase-memory.md, line 33
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash`
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
evals/fixtures/make.py, line 28
r = subprocess.run(["git", "-C", str(src), "archive", "--format=tar", sha],
evals/fixtures/make.py, line 34
shutil.rmtree(dest)
evals/fixtures/make.py, line 42
shutil.rmtree(p, ignore_errors=True)
Show more
evals/lib/agent.py, line 148
p = subprocess.run(cmd, cwd=cwd, capture_output=True, text=True, encoding="utf-8",
evals/lib/agent.py, line 200
p = subprocess.run(cmd, cwd=td, capture_output=True, text=True, encoding="utf-8", errors="replace",
evals/lib/common.py, line 128
return subprocess.run(cmd, cwd=cwd, input=stdin, capture_output=True, text=True,
evals/lib/common.py, line 215
shutil.rmtree(path, onerror=onerr)
evals/lib/common.py, line 229
r = subprocess.run(["cmd", "/c", "mklink", "/J", str(target), str(source)],
evals/lib/reference.py, line 119
return subprocess.run([shutil.which("node"), script_rel, *args], cwd=unit_dir, capture_output=True,
Install and update
Serious
install fetches a script from the network. The docs document an installer that pipes a download into a shell.
INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER
plugins/se-harness/commands/harness-mem-codebase-memory.md, line 33
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash`
plugins/se-harness/commands/harness-mem-codegraph.md, line 36
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/colbymchenry/codegraph/main/install.sh | sh`
plugins/se-harness/commands/harness-mem-graphify.md, line 56
- Bash shells with `curl`: `curl -LsSf https://astral.sh/uv/install.sh | sh`
Show more
plugins/se-harness/commands/harness-mem-graphify.md, line 57
- Bash shells with `wget` but no `curl`: `wget -qO- https://astral.sh/uv/install.sh | sh`
plugins/se-harness-copilot/commands/harness-mem-codebase-memory.md, line 33
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash`
plugins/se-harness-copilot/commands/harness-mem-codegraph.md, line 36
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/colbymchenry/codegraph/main/install.sh | sh`
plugins/se-harness-copilot/commands/harness-mem-graphify.md, line 56
- Bash shells with `curl`: `curl -LsSf https://astral.sh/uv/install.sh | sh`
plugins/se-harness-copilot/commands/harness-mem-graphify.md, line 57
- Bash shells with `wget` but no `curl`: `wget -qO- https://astral.sh/uv/install.sh | sh`
plugins/se-harness-copilot/skills/harness-mem-codebase-memory/SKILL.md, line 34
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash`
plugins/se-harness-copilot/skills/harness-mem-codegraph/SKILL.md, line 37
- macOS / Linux: `curl -fsSL https://raw.githubusercontent.com/colbymchenry/codegraph/main/install.sh | sh`
plugins/se-harness-copilot/skills/harness-mem-graphify/SKILL.md, line 57
- Bash shells with `curl`: `curl -LsSf https://astral.sh/uv/install.sh | sh`
plugins/se-harness-copilot/skills/harness-mem-graphify/SKILL.md, line 58
- Bash shells with `wget` but no `curl`: `wget -qO- https://astral.sh/uv/install.sh | sh`
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
evals/lib/agent.py, line 26
"Bash(curl *)", "Bash(wget *)", "Bash(ssh *)", "Bash(scp *)",
plugins/se-harness/skills/coding-discipline/EXAMPLES.md, line 311
- response = requests.post(destination, files={'file': data})
plugins/se-harness/skills/coding-discipline/EXAMPLES.md, line 319
+ response = requests.post(destination, files={"file": data})
Show more
plugins/se-harness/skills/coding-discipline/EXAMPLES.md, line 354
response = requests.post(destination, files={'file': data})
plugins/se-harness/skills/coding-discipline/EXAMPLES.md, line 435
- Manual: curl endpoint 11 times, see rate limit error
plugins/se-harness-copilot/skills/coding-discipline/EXAMPLES.md, line 311
- response = requests.post(destination, files={'file': data})
plugins/se-harness-copilot/skills/coding-discipline/EXAMPLES.md, line 319
+ response = requests.post(destination, files={"file": data})
plugins/se-harness-copilot/skills/coding-discipline/EXAMPLES.md, line 354
response = requests.post(destination, files={'file': data})
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
plugins/se-harness/scripts/decision-review.sh, line 59
env_has() { # env_has NAME - non-empty assignment in this repo's or the workspace root's .env.harness
plugins/se-harness/scripts/decision-review.sh, line 61
for f in .env.harness ../.env.harness; do
plugins/se-harness/scripts/decision-review.sh, line 83
# project that only uses Claude Code legitimately has none in .env.harness. Copilot CLI reads them
Show more
plugins/se-harness/scripts/decision-review.sh, line 84
# from .env.harness via scripts/langfuse-otel-env.sh. Names only, never values.
plugins/se-harness/scripts/decision-review.sh, line 88
elif [ -z "$miss" ]; then detail=".env.harness: ok"
plugins/se-harness/scripts/decision-review.sh, line 89
else detail=".env.harness: missing${miss} (only the Copilot CLI path needs them there; the Claude Code plugin keeps its own in the OS keychain)"; fi ;;
plugins/se-harness/scripts/decision-review.sh, line 92
else detail="token and dataset live in the plugin's keychain/config (/plugin -> dash0 -> Configure), not .env.harness"; fi ;;
plugins/se-harness/scripts/decision-review.sh, line 112
env_has "$sgenv" || detail=".env.harness: missing $sgenv (needed because auth is token)"
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
evals/datasets/l1_hooks.jsonl, line 6
{"id": "inject/daily-log-keeps-the-tail-not-the-head", "kind": "hook", "suite": "hook", "script": "inject-context.sh", "stdin": "{}", "files": {".harness/memory/daily/{today}.md":
evals/datasets/l1_hooks.jsonl, line 7
{"id": "inject/memory-index-keeps-the-head", "kind": "hook", "suite": "hook", "script": "inject-context.sh", "stdin": "{}", "files": {".harness/memory/MEMORY.md": "HEAD-ENTRY\nyyyy
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 85d5487d90d4. can delete files. install fetches a script from the network. The docs document an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: 85d5487d90d4f45e162190fd94d6c965749f63ab
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.