Security audit

Second Brain Ai

Security checks for vulnerabilities and agentic risk

Overview

This skill mostly matches its note-vault purpose, but its vault boundary can be bypassed through symbolic links, which could expose or modify files outside the chosen vault.

Install only for vaults you control, avoid placing symbolic links inside the configured vault, and be cautious using write operations until the package rejects symlinks and enforces realpath containment before every read and write.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/lib/common.js:54
Finding: Symbolic Link Traversal Allows Access Outside the Configured Vault
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/search_notes.js:20
Finding: User-Controlled Search Terms Are Executed as Regular Expressions
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The 'First-Success Path', sample prompts, expected outputs, and real task examples are presented entirely in Chinese, while earlier sections are in English and there is no statement that the skill is China-region-specific or that Chinese is optional. This creates a natural-language locale policy issue because the skill documentation implicitly steers usage toward a single language without user choice.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.