Security audit
Security checks for vulnerabilities and agentic risk
This skill is local and purpose-aligned, but it automatically saves every shared URL and related analysis persistently without per-link confirmation.
Install only if you want shared links to be treated as long-term local knowledge by default. Avoid sharing private, internal, or sensitive URLs while the skill is active unless you are comfortable with summaries and context being written under life/source; review and manually delete stored files when needed.
The skill is configured to auto-trigger on "ANY URL," which is overly broad for a capability that persistently stores and cross-references user-shared content. This can cause the agent to capture ordinary conversational links without explicit user intent, creating privacy and consent risks and unexpectedly expanding the user's stored knowledge base.
Referenced artifact was not completely inspected
1. `node scripts/source-library.js setup` — creates directories
Referenced artifact was not completely inspected
1. `node scripts/source-library.js setup` — creates directories
Referenced artifact was not completely inspected
1. `node scripts/source-library.js setup` — creates directories
Referenced artifact was not completely inspected
1. `node scripts/source-library.js setup` — creates directories
The skill uses 'env' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
The README emphasizes convenience and automatic capture but does not clearly warn users that shared URLs, summaries, claims, and analysis are stored persistently in the workspace. This creates a privacy and data-retention risk because users may share sensitive, internal, or personal links without realizing they will be indexed, cross-referenced, and retained over time.
The README describes very broad trigger conditions such as saving content when a user shares any URL, which can cause the skill to activate in situations the user did not clearly intend. Because this skill persistently stores and analyzes shared links and related content, accidental invocation can lead to unanticipated retention of sensitive research, private links, or contextual metadata.
The skill stores URLs, summaries, claims, quotes, analysis, and context persistently in local files, but the user-facing description does not clearly warn that this retention happens automatically. In a knowledge-management skill with broad URL-triggering, lack of transparent disclosure increases the chance users unknowingly persist sensitive links, notes, or contextual reasoning.
The queue done branch removes an item from source-queue.json by rewriting the queue without the selected entry. Although it logs after removal, there is no prior confirmation or warning that the operation is destructive and cannot be undone from within the tool.
This code path bulk-imports JSON entries and persists them by calling saveSource, which creates directories and writes summary files under the workspace. While individual writes emit success logs, there is no clear upfront disclosure in this command that running import will create multiple files on disk, which is a safety-relevant side effect for a CLI tool.
Detected: suspicious.dangerous_exec