Grades are a hygiene check, not a security guarantee.

Claude Code, Plugin

Self Review

Review every code change before the turn ends: fresh-context reviewer agents, a verified finding standard, honest convergence, and a measured token budget — enforced by a Stop hook, graph-aware when you have a code graph, zero-cost when you don't.

Compatibility: Not stated.

Grade C

One Medium finding. Read the report before installing.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

SECRETS_PATH_CREDENTIAL

Why this grade

  • SECRETS_PATH_CREDENTIAL Medium

    Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).

    scripts/coldrun.sh, line 123 # for the reason this one demonstrated: it cannot name `id_rsa`, `.npmrc` with a

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Note

    requests shell access. The manifest names this permission.

    PERMISSION_SHELL_DECLARED

    scripts/tier.test.mjs, line 214

    ...hunk("src/auth/login.ts", [" const out = child_process.exec(cmd);"], [" const out = safe(cmd);"]).split("\n"),

    scripts/tier.test.mjs, line 281

    ...hunk("src/foo.test.mjs", [' execSync("rm -rf " + tmp);', " const out = child_process.exec(cmd);"]).split("\n"),

  • Install and update

    Pass

    No install-time script found, and dependencies are pinned or absent.

  • Network

    Concern

    can reach a host that is not written as a fixed address. can reach example.com. The description does not name that host. can reach api.example.com. The description does not name that host.

    NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

    hooks/no-network.test.mjs, line 34

    "const r = await fetch(url);",

    hooks/no-network.test.mjs, line 39

    "const ws = new WebSocket(url);",

    hooks/no-network.test.mjs, line 40

    "curl -s https://example.com > out",

    Show more

    hooks/no-network.test.mjs, line 41

    "x=1; wget http://example.com",

    scripts/coldrun.test.mjs, line 211

    'curl -s -m 4 -I https://example.com >/dev/null 2>&1 && echo "NETWORK: reached" || echo "NETWORK: denied"',

    scripts/impact.test.mjs, line 265

    users.ts": 'export const byId = (id) => fetch("/api/users/" + id);\nexport const admin

    scripts/impact.test.mjs, line 266

    "web/src/api/hooks.ts": "export const useUser = (id) => fetch(`/api/users/${id}`);\n",

    scripts/impact.test.mjs, line 267

    "svc/client.py": 'def get_user(id): return requests.get(f"/api/users/{id}")\ndef legacy(id): return requests.get("/api/users/%s" % id)\n',

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

    hooks/self-review-gate.mjs, line 312

    // file that is not code. A dotfile has no extension to Node (`extname(".env")

    scripts/coldrun.sh, line 41

    # `.env`, `.envrc` and any key beside them sitting inside the sandbox with real

    scripts/coldrun.sh, line 123

    # for the reason this one demonstrated: it cannot name `id_rsa`, `.npmrc` with a

    Show more

    scripts/coldrun.sh, line 43

    # the copy also skips `.env*` outright, because a real install never has the

    scripts/coldrun.sh, line 121

    # was a blocklist - `.env`, `.env.*`, `.envrc` and a handful of build dirs -

    scripts/coldrun.sh, line 124

    # token, `.netrc`, `master.key`, a service-account JSON, or this repository's own

    scripts/coldrun.sh, line 136

    # `.env`/`.env.*`/`.envrc` stay as labelled hygiene for a repo that forgot to

    scripts/coldrun.sh, line 139

    copy_excludes=(.git .env .env.* .envrc)

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Note

    a file was over the read cap and was not fully read.

    OBFUSCATION_FILE_OVER_READ_CAP

    hooks/self-review-gate.test.mjs, line 1

    // Contract tests for self-review-gate.mjs. Run: node --test hooks/self-review-gate.test.mjs (or ./test.sh)

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit ec01e7b38359. requests shell access. The manifest names this permission. can reach a host that is not written as a fixed address. can reach example.com. The description does not name that host. can reach api.example.com. The description does not name that host. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked:

View source

github.com

Commit graded: ec01e7b3835963f806a0e038b1481f34eff5b487

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen