Claude Code, Skill
Skill Up
An evaluation and evolution tool for Agent Skills.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 53f6daecf4ac.
INSTALL_REMOTE_SCRIPT
Why this grade
- INSTALL_REMOTE_SCRIPT Medium
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
internal/agent/qodercli_test.go, line 157
"curl -fsSL https://qoder.com/install | bash",
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
action/main.py, line 235
result = subprocess.run(
action/main.py, line 254
result = subprocess.run(
action/main.py, line 361
result = subprocess.run(["bash", "-c", script], env=run_env, cwd=cwd)
Show more
action/main.py, line 504
result = subprocess.run(argv, env=run_env, cwd=target_dir)
e2e/agent_test.go, line 386
cmd := exec.Command("git", "clone", originDir, clonedDir)
e2e/agent_test.go, line 399
cmd := exec.Command(args[0], args[1:]...)
e2e/agent_test.go, line 1058
if out, err := exec.Command("docker", "info").CombinedOutput(); err != nil {
e2e/agent_test.go, line 1332
cmd := exec.Command(path, "--version")
Install and update
Serious
install fetches a script from the network. The docs document an installer that pipes a download into a shell.
INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER
internal/agent/qodercli_test.go, line 157
"curl -fsSL https://qoder.com/install | bash",
internal/agent/qodercli_test.go, line 172
"curl -fsSL https://static.qoder.com.cn/qoder-cli-cn/install.sh | bash",
internal/agent/qodercli_test.go, line 216
if !strings.Contains(rt.lastCommand, "curl -fsSL https://qoder.com/install | bash") {
Show more
skills/skill-upper/SKILL.md, line 148
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
skills/skill-upper/SKILL.md, line 151
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
skills/skill-upper/SKILL.md, line 154
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
skills/skill-upper/references/install.md, line 15
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
skills/skill-upper/references/install.md, line 25
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
skills/skill-upper/references/install.md, line 29
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
README.md, line 159
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
README.zh.md, line 155
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
docs/guide/getting-started.md, line 97
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
docs/zh/guide/getting-started.md, line 89
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
install.sh, line 95
curl -fL "$archive_url" -o "${tmp_dir}/${archive}"
install.sh, line 98
curl -fL "$checksums_url" -o "${tmp_dir}/checksums.txt"
action/main.py, line 8
* No internal-config fetch (skill-up-ali / code.alibaba-inc.com): unreachable
Show more
action/main.py, line 379
with urllib.request.urlopen(SKILL_UP_INSTALL_URL, timeout=120) as response:
internal/agent/node_install.go, line 56
" curl --connect-timeout " + shellQuote(agentCu
internal/agent/node_install_test.go, line 32
"curl --connect-timeout '" + agentCurlConnectT
e2e/testdata/full-report-pipeline/report.html, line 268
fetch("/api/feedback").then(function(r) { return r.json(); }).then(function(d) {
e2e/testdata/full-report-pipeline/report.html, line 450
fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" },
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
e2e/agent_test.go, line 92
return os.Getenv("OPENSANDBOX_API_KEY")
e2e/agent_test.go, line 820
codexAPIKey := os.Getenv("OPENAI_API_KEY")
e2e/agent_test.go, line 947
modelAPIKey := os.Getenv("ANTHROPIC_API_KEY")
Show more
e2e/agent_test.go, line 1062
modelAPIKey := os.Getenv("ANTHROPIC_API_KEY")
e2e/agent_test.go, line 1168
apiKey := os.Getenv("ANTHROPIC_API_KEY")
e2e/agent_test.go, line 1246
if os.Getenv("ANTHROPIC_API_KEY") == "" {
e2e/agent_test.go, line 1406
apiKey := os.Getenv("ANTHROPIC_API_KEY")
e2e/agent_test.go, line 1552
if os.Getenv("QODER_PERSONAL_ACCESS_TOKEN") == "" {
internal/credential/credential.go, line 59
// Load loads credentials from .env file and config file.
internal/credential/credential.go, line 66
logging.Warnf("Failed to load .env file: %v", err)
.gitignore, line 39
.env
CHANGELOG.md, line 740
empty config path, so only `--api-key`, env vars, and a CWD `.env`
docs/guide/writing-evals.md, line 1133
A `.env` file at the project root is also auto-loaded on startup.
docs/guide/writing-evals.md, line 1252
# Option 2: write it into the project root .env file
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
e2e/testdata/full-report-pipeline/report.html, line 153
<img class="logo" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAAAXNSR0IArs4c6QAAANhlWElmTU0AKgAAAAgABQEaAAUAAAABAAAASgEbAAUAAAABAAAAUgEoAAMAAAABAAIAAAE
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 53f6daecf4ac. requests shell access. The manifest names this permission. install fetches a script from the network. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: 53f6daecf4ac79e4e53ea53f3fe17dac3114debb
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.