skills/sergio-bershadsky/ai/secondbrain-init/Socket

secondbrain-init

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the scaffolding purpose is mostly coherent, but the skill is over-scoped because it normalizes 'maximum freedom' Claude permissions unrelated to project setup. Official npm/VitePress use is benign; the main risk is disproportionate agent access, with added medium supply-chain risk from the optional third-party qmd tool.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Apr 1, 2026, 08:07 AM

Package URL

pkg:socket/skills-sh/sergio-bershadsky%2Fai%2Fsecondbrain-init%2F@cf08e4bc02fceac01e23a1dcb4ac03a76b3e34be