2nd Brain

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent personal knowledge-base skill, but it intentionally stores personal notes and attachments for future retrieval, and its optional enhanced search setup installs an external CLI.

This skill appears safe for its stated purpose, but treat it like a persistent personal notebook: check what it saves, avoid storing information you would not want retained, and only use the optional QMD install if you trust the external source.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Personal details, preferences, contacts, and memories may persist and be reused in later conversations.

Why it was flagged

The skill intentionally stores and later retrieves personal knowledge, so saved entries may influence future answers and may contain sensitive personal context.

Skill content
A personal knowledge management system for capturing and retrieving information about people, places, things, and ideas.
Recommendation

Store only information you are comfortable keeping in the brain workspace, periodically review or delete old entries, and avoid saving highly sensitive data unless needed.

What this means

The assistant can add or modify files and save attachments in the brain workspace.

Why it was flagged

The skill requests write access and attachment handling inside its brain workspace, which is expected for this purpose but still gives the agent authority to create and update local knowledge files.

Skill content
permissions:\n  paths:\n    - "~/.openclaw/workspace/brain/**"\n  write: true\n  attachments: true
Recommendation

Review created entries and attachments, and confirm before asking the assistant to save sensitive or large files.

What this means

If the optional backend is installed, local execution will depend on code from that external repository.

Why it was flagged

The optional enhanced search setup installs a global CLI directly from a GitHub repository; this is user-directed and not required, but it depends on external package provenance.

Skill content
Optional: For richer BM25 + vector + reranking search, enable the QMD backend:\n    1. Install QMD CLI: bun install -g https://github.com/tobi/qmd
Recommendation

Only install the optional QMD CLI if you trust the repository, and prefer a pinned or reviewed version where possible.