# Second Brain Privacy

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-undefined-ui-second-brain-os-second-brain-privacy`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [undefined-ui](https://agentstack.voostack.com/s/undefined-ui)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [undefined-ui](https://github.com/undefined-ui)
- **Source:** https://github.com/undefined-ui/second-brain-os/tree/main/skills/second-brain-privacy
- **Website:** https://x.com/undefinedKi/status/2068306794116501544

## Install

```sh
agentstack add skill-undefined-ui-second-brain-os-second-brain-privacy
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Audit privacy

A mature vault is one of the highest-signal documents about a person that
exists, and it lives in a folder that gets synced, committed, backed up and
occasionally shared. Every copy is another place the content exists.

## Core rule

Find and report. Delete nothing without an explicit instruction naming what to
remove.

## Workflow

1. **Scan for credentials:** API keys, tokens, passwords, connection strings.
   Check `.obsidian/plugins/` too, where plugin data lives.
2. **Find other people's information:** meeting transcripts, personal messages,
   anything told in confidence, health or financial detail about someone else.
3. **Find confidential work:** material under NDA or employer restriction.
4. **Check the git remote.** Private material in a public repo is the most
   expensive version of this problem.
5. **Report by severity,** with the specific file and why.

## Output format

```
Critical: 
High: 
Review: 
Repo visibility:  - 
```

## Calibration

Never quote the credential itself in the report. Name the file and the type.

Redaction after ingest is unreliable, because material has already propagated
into concept pages and links. When something should not be there, say what else
would need removing with it.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [undefined-ui](https://github.com/undefined-ui)
- **Source:** [undefined-ui/second-brain-os](https://github.com/undefined-ui/second-brain-os)
- **License:** MIT
- **Homepage:** https://x.com/undefinedKi/status/2068306794116501544

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-undefined-ui-second-brain-os-second-brain-privacy
- Seller: https://agentstack.voostack.com/s/undefined-ui
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.