Is christinetyip/second-brain safe?
Yes. christinetyip/second-brain is safe to install. Oathe's behavioral security audit gave the second-brain skill by christinetyip a trust score of 81/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/christinetyip/second-brain
Is christinetyip/second-brain safe to install?
This is a legitimate personal knowledge management skill that integrates with the Ensue API service. While the skill contains appropriate security warnings and shows no malicious behavior, it does transmit user data to an external service for storage and retrieval.
What security issues were found in christinetyip/second-brain?
Category Scores
Findings (3)
MEDIUM External API Data Transmission -20 ▶
The skill sends user data to the external Ensue API service at api.ensue-network.ai for knowledge storage and retrieval. While this is the skill's intended functionality, it represents data leaving the local system.
LOW Executable Shell Script -15 ▶
The skill contains an executable shell script that makes API calls. The script appears benign but represents potential code execution.
INFO API Key Requirement -10 ▶
The skill requires an ENSUE_API_KEY to function, creating a dependency on external service configuration.
Should I install christinetyip/second-brain?
Oathe's verdict for christinetyip/second-brain is SAFE with a trust score of 81/100. Recommendation: Install with caution.