Second Brain: Turn conversations into lasting knowledge
v0.1.4Personal knowledge base powered by Ensue for capturing and retrieving understanding. Use when user wants to save knowledge, recall what they know, manage their toolbox, or build on past learnings. Triggers on "save this", "remember", "what do I know about", "add to toolbox", "my notes on", "store this concept".
⭐ 14· 5.4k·39 current·44 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's purpose (a Second Brain backed by Ensue) matches the included behavior: SKILL.md documents an Ensue API and the bundled script calls https://api.ensue-network.ai/. However, the registry metadata (Requirements section) lists no required env vars/credentials while the skill's own metadata and scripts require ENSUE_API_KEY. That discrepancy is an incoherence in the listing.
Instruction Scope
SKILL.md gives explicit interaction rules (ask before saving, verify content quality) and defines the exact API calls via the wrapper script. The instructions do not tell the agent to read unrelated files, other env vars, or exfiltrate data to arbitrary endpoints — all external calls are to api.ensue-network.ai as expected.
Install Mechanism
No install spec is provided (instruction-only), and the only code is a small included shell wrapper. There are no downloads, external installers, or archive extraction steps. This is low-risk from an install mechanism perspective.
Credentials
At runtime the script requires a single credential (ENSUE_API_KEY), which is proportionate to contacting the Ensue API. The concern is that the registry metadata does not declare this required env var/primary credential, so users may not realize an API key is needed or where it will be stored. Confirm where/ how you'll supply the key (clawdbot.json was referenced in the script) and that you're comfortable with that placement.
Persistence & Privilege
The skill is not marked always:true, does not request elevated platform privileges, and does not modify other skills or system-wide settings. It includes only its own wrapper script and operates against the Ensue API.
What to consider before installing
This skill legitimately uses an external Ensue API and needs an ENSUE_API_KEY, but the registry listing omitted that requirement. Before installing: 1) Verify the skill source/author (source is unknown). 2) Confirm how and where you'll store the ENSUE_API_KEY (the script suggests clawdbot.json) and whether that storage meets your security policies. 3) Review Ensue's privacy/security policy to ensure you’re comfortable sending content to api.ensue-network.ai. 4) If you proceed, test with non-sensitive sample data first and ask the publisher to update the registry metadata to declare ENSUE_API_KEY so the listing is accurate.Like a lobster shell, security has layers — review code before you run it.
latestvk97dn4ftvz6qv5r5qwr3f1srqn80218v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvENSUE_API_KEY
Primary envENSUE_API_KEY