Claude Code, Skill
skillxp
Skill invocation runner: install an Agent Skill in a fresh fixture, invoke an agent harness headlessly, and report what actually reached the model, with transcript evidence.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
site/content/docs/harness-lore.md, line 76
credentials from the keychain (and migrates any `.credentials.json`
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
wrappers/npm/scripts/build-packages.mjs, line 50
fs.rmSync(out, { recursive: true, force: true });
wrappers/pypi/build_wheels.py, line 80
subprocess.run(
wrappers/pypi/build_wheels.py, line 86
subprocess.run(
Show more
wrappers/pypi/src/skillxp/__init__.py, line 54
raise SystemExit(subprocess.call(argv))
wrappers/pypi/README.md, line 38
subprocess.run([skillxp.binary_path(), "observe", "-harness", "claude-code", ...])
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL
profile/profile.go, line 221
switch token := os.Getenv("CLAUDE_CODE_OAUTH_TOKEN"); {
site/content/docs/harness-lore.md, line 76
credentials from the keychain (and migrates any `.credentials.json`
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 4f5af85cd7e5. can delete files. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: 4f5af85cd7e549014a7e6584bde0e0049fd85560
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.