Security audit
Security checks for vulnerabilities and agentic risk
This skill is coherent for email follow-up memory, but it sends and persists potentially sensitive email context to an external service without enough user control or data-handling guidance.
Install only if you are comfortable sending email-thread summaries to the BlueColumn/Supabase endpoint and your organization permits that use. Avoid using it for customer, legal, HR, financial, regulated, or confidential correspondence unless retention, deletion, access controls, and data-processing terms are approved.
The skill instructs agents to send detailed email thread contents, including names, contract context, deadlines, and NDA status, to an external API without any privacy notice, consent guidance, or data-handling restrictions. This creates a real risk of unauthorized disclosure of sensitive correspondence and business context to a third-party service.
This command performs external transmission of substantive email-thread data to a remote Supabase endpoint using a live API key. Even if intended functionality is memory tracking, the payload includes sensitive business communications and personally identifiable context, so misuse, misconfiguration, or compromise of the remote service could expose confidential information.
After any meaningful exchange, store who promised what and the deadline.
curl -X POST https://xkjkwqbfvkswwdmbtndo.supabase.co/functions/v1/agent-remember \
-H "Authorization: Bearer $BLUECOLUMN_API_KEY" \
-H "Content-Type: application/json" \
-d '{"text": "THREAD: with Sarah Kim re: vendor contract. We promised revised pricing sheet by Aug 5. She owes us the signed NDA. Last message: hers, Jul 30.", "title": "email - vendor contract"}'
The recall and workflow sections normalize persistent external storage and retrieval of email history but do not disclose that this data may remain stored outside the local environment and may influence future outputs. That omission is dangerous because users may unknowingly cause long-term retention of sensitive thread history, affecting privacy, compliance, and downstream agent behavior.
No suspicious patterns detected.