Claude Code, Skill
Example: Night Raid
Sample skill for late refactors that also asks for a shell and for environment access.
Sample grade: D, Risky. Shape: Triangle.
On the real scale, D means: Serious risks found. Only try it in a sandbox. That sentence describes the scale. It does not apply to a real package, because this page is example data.
Grades are a hygiene check, not a security guarantee. The date is part of the grade.
What was checked
These notes are written for the sample. They are not findings from a real review.
Permissions
Serious
The sample asks for a shell, which is wider than editing the open file.
Install and update
Pass
The sample install does not fetch extra code.
Network
Pass
The sample makes no network calls.
Secrets
Serious
The sample reads environment variables, and those can hold tokens.
Agent instructions
Pass
The sample instructions match the description and do not hide a step.
Obfuscation
Pass
The sample is readable. Nothing is encoded to hide behaviour.
Note
Example note. The sample requests a shell and reads environment variables, which can include tokens. That is a serious risk in this fictional entry.
Date and source
Date checked: (sample date for the layout, not a real review).