Claude Code, Skill
yomiyasu
AIが生成した日本語を、意味と条件を保って読みやすく整えるスキル
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
references/fact-recovery.md, line 22
- 開いてよいのは、原稿か会話に名前の出たファイルを3つまで、読むだけ。SKILL.md の冒頭で推敲する原稿を選ぶために一覧したファイルは、一覧に名前が出ただけでは数えない。認証情報らしいファイル（`.env`、`*.pem`、`*.key`、`id_rsa`、名前に credentials を含むもの）は開かない。原稿が変更の説明（PR、リリースノート、
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
scripts/build_corpus.py, line 63
res = subprocess.run(
scripts/build_corpus.py, line 127
os.remove(os.path.join(d, f))
scripts/yomiyasu_check.py, line 1437
process = subprocess.Popen(command, stdin=subprocess.DEVNULL, stdout=subprocess.PIPE,
Show more
scripts/yomiyasu_check.py, line 1446
# subprocess.run と同じ止め方（POSIX では、ここまでの出力が expired に入っている）
skills/yomiyasu/scripts/yomiyasu_check.py, line 1437
process = subprocess.Popen(command, stdin=subprocess.DEVNULL, stdout=subprocess.PIPE,
skills/yomiyasu/scripts/yomiyasu_check.py, line 1446
# subprocess.run と同じ止め方（POSIX では、ここまでの出力が expired に入っている）
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/setup_corpus_static.py, line 128
cp .env.example .env
.gitignore, line 4
.DS_Store
references/fact-recovery.md, line 22
- 開いてよいのは、原稿か会話に名前の出たファイルを3つまで、読むだけ。SKILL.md の冒頭で推敲する原稿を選ぶために一覧したファイルは、一覧に名前が出ただけでは数えない。認証情報らしいファイル（`.env`、`*.pem`、`*.key`、`id_rsa`、名前に credentials を含むもの）は開かない。原稿が変更の説明（PR、リリースノート、
Show more
docs/usage.md, line 71
- 読みに行くファイルは原稿か会話に名前の出たものを3つまでで、読むだけです。`.env` や秘密鍵のような認証情報らしいファイルは開きません。変更の説明の原稿で、会話に差分がないときだけ、読むだけの `git diff` か `git log -p -1` を1回動かします。
skills/yomiyasu/references/fact-recovery.md, line 22
- 開いてよいのは、原稿か会話に名前の出たファイルを3つまで、読むだけ。SKILL.md の冒頭で推敲する原稿を選ぶために一覧したファイルは、一覧に名前が出ただけでは数えない。認証情報らしいファイル（`.env`、`*.pem`、`*.key`、`id_rsa`、名前に credentials を含むもの）は開かない。原稿が変更の説明（PR、リリースノート、
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
CHANGELOG.md, line 1
# 変更履歴
scripts/yomiyasu_check.py, line 1
#!/usr/bin/env python3
scripts/yomiyasu_diff.py, line 1
#!/usr/bin/env python3
Show more
scripts/yomiyasu_lint.py, line 1
#!/usr/bin/env python3
skills/yomiyasu/scripts/yomiyasu_check.py, line 1
#!/usr/bin/env python3
skills/yomiyasu/scripts/yomiyasu_diff.py, line 1
#!/usr/bin/env python3
skills/yomiyasu/scripts/yomiyasu_lint.py, line 1
#!/usr/bin/env python3
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 41e5aec228f0. can delete files. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 41e5aec228f080fe24e5f795efee2ac3fda61839
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.