BrainRepo
v1.0.0Your personal knowledge repository — capture, organize, and retrieve everything using PARA + Zettelkasten. Triggers on: "save this", "remember", "note", "capture", "brain dump", daily/weekly reviews, searching stored knowledge, managing projects/areas/people. Works with any AI agent that reads markdown. Stores everything as .md files in a Git repo for Obsidian, VS Code, or any editor.
⭐ 4· 2.5k·9 current·10 all-time
by@codezz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match behavior: captures, organizes, and retrieves notes as .md files in a git-backed repository. No unrelated binaries, env vars, or external endpoints are requested.
Instruction Scope
SKILL.md instructs the agent to check for and, if missing, automatically create ~/Documents/brainrepo/ (non-configurable), populate templates, initialize git, and run commits/pushes as part of workflows — which can overwrite or create files in the user's home without explicit, per-run confirmation.
Install Mechanism
Instruction-only skill with no install spec or downloads; lowest install risk because nothing is written by an installer. All behavior is via runtime file operations.
Credentials
No env vars or external credentials are requested, which is appropriate. However, the skill relies on git commands (commit/push) that may use the user's git credentials/config or attempt network pushes to configured remotes — this is proportional to a git-backed repo but has privacy/exfiltration implications if remotes are present.
Persistence & Privilege
Does not request always:true and is user-invocable. It does write persistent files under a fixed path and performs git operations; autonomous invocation combined with automatic onboarding could let the agent create/modify files without explicit user approval each time.
Scan Findings in Context
[no-findings] expected: Regex scanner found nothing because this is an instruction-only skill (no code files). That absence is expected but does not guarantee safety — the SKILL.md itself is the primary surface to review.
What to consider before installing
What to consider before installing: 1) Backup or inspect ~/Documents/brainrepo/ if it already exists — the skill uses that exact, non-configurable path and may create/overwrite files. 2) Prefer running onboarding manually the first time rather than letting the agent auto-run it, so you can review created files and templates. 3) Check your git remotes and credentials: daily/weekly workflows call git commit and git push which could transmit repository contents to configured remotes. If you keep sensitive data, remove or avoid pushing it. 4) If you want less risk, request a configurable path or run the skill in a sandbox folder you control. 5) Consider limiting autonomous invocation or monitoring the agent's first runs to confirm behavior matches expectations.Like a lobster shell, security has layers — review code before you run it.
latestvk978dr9rf7nhxhjjn9y16qnf7x80hzpf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.