Claude Code, Skill
skills
Eleven focused workflows for developers who need more from their agents than a one-line prompt.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
PERMISSION_SHELL_UNDECLARED NETWORK_HOST_FROM_INPUT
Why this grade
- PERMISSION_SHELL_UNDECLARED Medium
Runs shell commands that the manifest or description does not mention.
evals/first-principles/fixtures/nightly-report/nightly.py, line 85
os.remove(csv_path) - NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
skills/consulting/scripts/check-step.sh, line 124
for token in ("fetch(", "new XMLHttpRequest", "new WebSocket", "new EventSource", "import("):
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files. requests shell access. No manifest field names shell or command execution.
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
evals/first-principles/fixtures/nightly-report/nightly.py, line 85
os.remove(csv_path)
evals/skill-issue/check-outputs.py, line 54
valid = subprocess.run([sys.executable, str(scripts[0]), str(workspace / "valid.json")], cwd=workspace, capture_output=True, text=True, timeout=10)
evals/skill-issue/check-outputs.py, line 55
invalid = subprocess.run([sys.executable, str(scripts[0]), str(workspace / "invalid.json")], cwd=workspace, capture_output=True, text=True, timeout=10)
Show more
evals/skill-issue/check-outputs.py, line 56
invalid_missing = subprocess.run([sys.executable, str(scripts[0]), str(workspace / "invalid-missing.json")], cwd=workspace, capture_output=True, text=True, timeout=10)
evals/skill-issue/check-outputs.py, line 57
invalid_case_id = subprocess.run([sys.executable, str(scripts[0]), str(workspace / "invalid-case-id.json")], cwd=workspace, capture_output=True, text=True, timeout=10)
evals/skill-issue/check-outputs.py, line 58
no_argument = subprocess.run([sys.executable, str(scripts[0])], cwd=workspace, capture_output=True, text=True, timeout=10)
evals/skill-issue/check-outputs.py, line 69
checked = subprocess.run([sys.executable, str(scripts[0]), str(fixture)], cwd=workspace, capture_output=True, text=True, timeout=10)
evals/skill-issue/check-outputs.py, line 99
checked = subprocess.run([sys.executable, str(scripts[0]), str(fixture)], cwd=workspace, capture_output=True, text=True, timeout=10)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
skills/consulting/scripts/check-step.sh, line 124
for token in ("fetch(", "new XMLHttpRequest", "new WebSocket", "new EventSource", "import("):
skills/prototyping/scripts/serve.sh, line 71
if curl --fail --silent --show-error --max-time 1 \
skills/consulting/assets/index.html, line 194
async function text(u){try{const r=await fetch(u,{cache:'no-store'});if(r.ok)return await r.text()}catch(e){}return null}
Show more
skills/consulting/assets/index.html, line 208
async function poll(){try{const r=await fetch('session.json',{cache:'no-store'});if(!r.ok)throw 0;const t=await r.text();if(t!==raw){const J=JSON.parse(t);if(!J||!Array.isArray(J.s
skills/consulting/references/page-contract.md, line 303
- script text contains none of `fetch(`, `new XMLHttpRequest`, `new WebSocket`, `new EventSource`,
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
evals/automake/assertions.md, line 130
files, never reads or commits `.env.local`, accepts the one-line passing typo
evals/automake/evals.json, line 31
"files": ["fixtures/run-now-repo/readiness.py","fixtures/run-now-repo/test_readiness.py","fixtures/run-now-repo/.env.local"]
evals/automake/iteration-1-results.md, line 44
- Run-now preflight never read or committed `.env.local`.
Show more
evals/automake/no-skill-failures/round-1.md, line 56
- Run-now preflight asked no questions, excluded `.env.local` without reading
evals/automake/no-skill-failures/round-2.md, line 41
- Run-now preflight excluded `.env.local` without reading or committing it.
evals/automake/no-skill-failures/round-3-saturation.md, line 31
- Run-now preflight safely excluded `.env.local` without reading or committing
evals/automake/trigger-eval.json, line 6
{"id":5,"split":"train","query":"Start the ratchet immediately in this new folder even though it has no HEAD. Protect .env.local, establish the baseline, fix the readiness test, an
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
skills/consulting/assets/fonts/InterVariable.woff2.b64, line 1
d09GMgABAAAABV/wABMAAAANdbgABV91AAQAQgAAAAAAAAAAAAAAAAAAAAAAAAAAGsECG4mzChyB
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit e0183e207101. can delete files. requests shell access. No manifest field names shell or command execution. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: e0183e2071015ab5674f230105e565d86d8890c4
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.