Security audit
Hivemind
Security checks for vulnerabilities and agentic risk
Overview
Conversation sharing is disclosed, but the plugin also automatically launches other AI tools and changes installed skills without separate approval.
Before installing, consider organization-wide chat sharing, additional AI processing of conversations and local skills, and automatic global skill edits. Look for explicit opt-in, sandboxing, and review controls for mining. Pausing capture does not stop code-graph uploads. SkillSpector was not applicable and did not assess these JavaScript behaviors.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
