Claude Code, Plugin
zilliz
Zilliz Cloud management plugin with 14 skills covering cluster lifecycle, collection schema, vector search, index tuning, bulk import, RBAC, backups, and monitoring.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 35c86c000c91, unchanged since the check below.
NETWORK_HOST_FROM_INPUT
Why this grade
- NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
skills/ask-zilliz/references/auto-scaling.md, line 31
curl -X POST "${BASE_URL}/v2/clusters/${CLUSTER_ID}/modify" \
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Note
The docs document an installer that pipes a download into a shell.
INSTALL_DOCUMENTED_INSTALLER
commands/quickstart.md, line 19
curl -fsSL https://raw.githubusercontent.com/zilliztech/zilliz-cli/master/install.sh | bash
skills/quickstart/SKILL.md, line 19
curl -fsSL https://raw.githubusercontent.com/zilliztech/zilliz-cli/master/install.sh | bash
skills/setup/SKILL.md, line 10
1. **CLI installed and up to date?** Run `curl -fsSL https://raw.githubusercontent.com/zilliztech/zilliz-cli/master/install.sh | bash` to ensure the latest version is installed.
Show more
skills/setup/SKILL.md, line 159
TH. Try re-running the install script: `curl -fsSL https://raw.githubusercontent.com/zilliztech/zilliz-cli/master/install.sh | bash`.
skills/setup/SKILL.md, line 19
curl -fsSL https://raw.githubusercontent.com/zilliztech/zilliz-cli/master/install.sh | bash
Network
Concern
can reach a host that is not written as a fixed address. accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST
skills/ask-zilliz/references/auto-scaling.md, line 31
curl -X POST "${BASE_URL}/v2/clusters/${CLUSTER_ID}/modify" \
skills/ask-zilliz/references/auto-scaling.md, line 37
curl -X POST "${BASE_URL}/v2/clusters/${CLUSTER_ID}/modify" \
skills/ask-zilliz/references/auto-scaling.md, line 71
curl -X POST "${BASE_URL}/v2/clusters/${CLUSTER_ID}/modify" \
Show more
skills/ask-zilliz/references/auto-scaling.md, line 99
curl -X POST "${BASE_URL}/v2/clusters/${CLUSTER_ID}/modify" \
skills/ask-zilliz/references/critical-operations.md, line 95
curl --request POST \
skills/ask-zilliz/references/developer-guide.md, line 139
vectors = pinecone_index.fetch(ids=ids_batch)
skills/ask-zilliz/references/volume.md, line 59
curl -X POST "${BASE_URL}/v2/volumes/create" \
Secrets
Pass
No read of a credential file or secret environment variable found.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 35c86c000c91. The docs document an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. accepts a host from input, with no fixed list in this file.
Date and source
Date checked:
github.com
Commit graded: 35c86c000c91abb35f3eeed5cca15ebd69cba4d5
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.