Install
$ agentstack add skill-undefined-ui-second-brain-os-second-brain-publish ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Prepare to publish
Once something is crawled, it is out. Every check here is cheap; the failure it prevents is permanent.
Core rule
Explicit opt-in only. A page publishes because it says publish: true, never because nothing excluded it.
Workflow
- List the opt-in set. Every page marked for publication.
- Follow their links. A published page linking to a private one either
leaks the title or produces a dead link. Report both.
- Scan for anything that should never ship: credentials, other people's
private information, confidential work, personal detail in examples.
- Check the frontmatter for fields not meant to be public, such as
confidence labels or private source paths.
- Report, do not export. The user runs the build.
Output format
Publishable: pages
Links to unpublished pages:
[[public page]] -> [[private page]]
Flagged content:
Frontmatter to strip:
Verdict:
Calibration
Err toward flagging. A false positive costs the user ten seconds; a miss is permanent.
If the user asks to publish the whole vault, ask what they intend to do about the private material rather than proceeding.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: undefined-ui
- Source: undefined-ui/second-brain-os
- License: MIT
- Homepage: https://x.com/undefinedKi/status/2068306794116501544
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.