Claude Code, Skill
Skill Forge
Audit, validate, pressure-test, and grade OpenAI or portable Agent Skills from ZIPs, folders, or SKILL.md drafts; diagnose triggering, suggest fixes, and assess release readiness.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
OBFUSCATION_MINIFIED_PAYLOAD
Why this grade
- OBFUSCATION_MINIFIED_PAYLOAD Medium
Contains a very long line with almost no spaces in a script or style file.
scripts/run_bounded_tests.py, line 239
print(json.dumps(dict(source_read=pathlib.Path('/source/canary').read_text()=='synthetic',source_write_denied=denied('/source/canary'),root_write_denied=denied('/tmp/outside'),scra
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
evals/run_linux_backend_check.py, line 13
files = subprocess.check_output(['git', 'ls-files'], cwd=ROOT, text=True).splitlines()
evals/test_harness.py, line 152
proc = subprocess.run([sys.executable, '-S', str(HERE / 'fixture_server.py'), '--fixture', str(root / 'fixture.json'), '--trace', str(root / 'trace.jsonl')],
scripts/generate_release_notes.py, line 117
result = subprocess.run(
Show more
scripts/install_skill.py, line 147
shutil.rmtree(work)
scripts/package_skill.py, line 360
proc = subprocess.run(
scripts/release_skill.py, line 95
result = subprocess.run(
scripts/release_skill.py, line 197
result = subprocess.run(command, cwd=REPO_ROOT, check=False)
scripts/run_bounded_tests.py, line 130
process = subprocess.Popen(argv, stdin=subprocess.DEVNULL, stdout=subprocess.PIPE,
scripts/run_bounded_tests.py, line 233
for i in range(int(sys.argv[2])+2): children.append(subprocess.Popen([sys.executable,'-I','-c','import time;time.sleep(10)']))
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
evals/build_fixtures.py, line 30
if base.is_file() and not base.is_symlink() and not base.name.startswith('.env'):
evals/build_fixtures.py, line 33
paths.extend(p for p in base.rglob('*') if p.is_file() and not p.is_symlink() and not p.name.startswith('.env') and '__pycache__' not in p.parts)
evals/run_api_evals.py, line 122
key = os.environ.get('OPENAI_API_KEY')
Show more
evals/test_bounded_runner.py, line 34
('source_files', ['../outside']), ('source_files', ['.env']),
evals/test_install_skill.py, line 98
protected = self.target / ".env.local"
evals/test_install_skill.py, line 102
if path.name == ".env" or path.name.startswith(".env."):
evals/test_install_skill.py, line 108
protected = protected.rename(self.target / ".env")
scripts/inspect_skill_package.py, line 69
TEXT_FILENAMES = {".env", ".envrc", ".editorconfig", "makefile", "dockerfile"}
scripts/inspect_skill_package.py, line 80
re.compile(r"(^|/|\\)\.env($|\.)|\.env$", re.IGNORECASE),
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains a minified payload.
OBFUSCATION_MINIFIED_PAYLOAD
scripts/run_bounded_tests.py, line 239
print(json.dumps(dict(source_read=pathlib.Path('/source/canary').read_text()=='synthetic',source_write_denied=denied('/source/canary'),root_write_denied=denied('/tmp/outside'),scra
scripts/run_self_tests.py, line 1
#!/usr/bin/env python3
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit dafa376f6bbc. can delete files. reads a credential or environment file. contains a minified payload.
Date and source
Date checked:
github.com
Commit graded: dafa376f6bbc943358667e4a68d3020b52b7d0c8
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.