Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent personal notes CLI guide with expected local storage and optional cloud embeddings, but users should treat stored notes and OpenAI embedding setup as private-data decisions.
Before installing, confirm you are comfortable storing personal notes under ~/.segundo and using any configured brain path. Prefer local Ollama embeddings for sensitive memories, and only configure OpenAI embeddings if you are comfortable sending note/search data to a cloud provider. Use delete carefully because the artifact does not document recovery behavior.
The skill documents a delete command that permanently removes memories but does not warn users that the action is destructive or whether recovery is possible. In an agent-mediated context, this increases the risk of accidental data loss because a user or downstream automation may invoke deletion without understanding the consequence.
The semantic search setup mentions OpenAI support but does not clearly warn that configuring a cloud embedding provider may transmit stored memory content or search queries to a third party. Because this tool stores personal notes and 'second brain' content, users may unknowingly expose sensitive data externally, making the omission materially risky in this skill context.
No suspicious patterns detected.
