second-brain-digest
AdvisoryAudited by Static analysis on May 8, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI06: Memory and Context PoisoningWhat this means
Private notes, meeting details, or conversation excerpts could become easier to retain, search, or reuse if the user stores the generated cards.
Why it was flagged
The skill is explicitly intended to transform potentially private user-provided material into reusable personal knowledge cards and relate them to prior knowledge.
Skill content
把扔进来的任何碎片内容（文章、笔记、截图文字、对话记录、想法片段）提炼成标准化知识卡片，并自动发现与已有卡片的关联，构建可检索、可复用的个人知识库。
Recommendation
Before using it on sensitive material, review the generated cards and choose carefully where, whether, and in what format to store them.