ClawHub
Back to skill

Security audit

LYGO Second Brain

Security checks for vulnerabilities and agentic risk

Overview

This is a local note-vault assistant with disclosed local writes, local model use, and explicit limits against publishing or pushing without user approval.

Install only if you are comfortable letting the agent read and write the configured local vault and create local git commits there. Keep secrets out of the vault, use local Ollama unless you explicitly approve a remote endpoint, and review the external LYGO stack tooling before running its installer or commands.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding
Without declared permissions the skill's intent is opaque and cannot be validated.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- Cloud-only Kimi/Claude as primary (optional fallback only)
- Autonomous overnight `/dream` v1 (not shipped — build after ingest+index stable)
- Auto `git push`, ClawHub publish, or kernel egg plant without consent

## Setup
Confidence
75% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Static analysis

No suspicious patterns detected.