github Python analyzed 080368d

BrianArfi/ai-second-brain

A personal AI operating system for knowledge workers. Carries your context, reaches your real tools, runs your SOPs, and learns from every correction.

maintainer: BrianArfi
licence: Apache-2.0
first seen: 2026-08-14
last seen: 2026-09-11
releases · 30d: 1
short id

risk 64/100 · heuristic grade

D high inferred analyzer v33 (current)

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 12
trust mitigators mixed − 3

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 1w ago · see ecosystem CVEs →

risk trajectory 3 movements

2w ago C · 56 → D · 64
3w ago C · 44 → C · 56
4w ago A · 0 → C · 44

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 1 findings · grade factor +12

high dangerous code

committed secret: Slack token, Google OAuth client secret

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 080368d · analyzer v33 · 6d ago

skills & prompt files 107

danger signals29

suspicious endpoint eu.mixpanel.com (telemetry) BrianArfi-ai-second-brain-080368d/.agent/skills/mixpanel-connector/scripts/mixpanel_client.py :53 base_url = "https://eu.mixpanel.com/api/2.0"
suspicious endpoint data.eu.mixpanel.com (telemetry) BrianArfi-ai-second-brain-080368d/.agent/skills/mixpanel-connector/scripts/mixpanel_client.py :101 base_url = "https://data.eu.mixpanel.com/api/2.0/export"
suspicious endpoint api.mixpanel.com (telemetry) BrianArfi-ai-second-brain-080368d/.agent/skills/mixpanel-connector/scripts/mixpanel_client.py :169 url = f"https://api.mixpanel.com/import?strict=1&project_id={config.get('MIXPANEL_PROJECT_ID','')}"
suspicious endpoint 1.2.3.4 BrianArfi-ai-second-brain-080368d/meeting-recorder/vexa_bots.py :705 original = "ADMIN_TOKEN=abc\nTRANSCRIPTION_SERVICE_URL=http://1.2.3.4:8083/v1/audio/transcriptions\n"
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/scripts/doc_share_gate.py :116 tok, ["https://www.googleapis.com/auth/drive"])
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/scripts/gdoc_insert_images.py :64 DOCS_SCOPE = "https://www.googleapis.com/auth/documents"
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/scripts/gdoc_insert_images.py :65 DRIVE_SCOPE = "https://www.googleapis.com/auth/drive"
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/scripts/gdoc_replace_image.py :30 SCOPES = ["https://www.googleapis.com/auth/drive"]
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/scripts/gdoc_reply_comments.py :33 SCOPES = ["https://www.googleapis.com/auth/drive"]
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/scripts/gdoc_revisions.py :22 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/gdoc-surgical/gdoc_surgical.py :52 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/gdocs-create/format_pass.py :39 SCOPES = ['https://www.googleapis.com/auth/documents', 'https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/gdocs-create/gdocs_create.py :46 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/gdocs-writer/scripts/gdocs_writer.py :18 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope gmail.modify BrianArfi-ai-second-brain-080368d/.agent/skills/gmail-connector/gmail_auth_helper.py :13 SCOPES = ['https://www.googleapis.com/auth/gmail.modify']
over-broad OAuth scope gmail.modify BrianArfi-ai-second-brain-080368d/.agent/skills/gmail-connector/gmail_manager.py :38 SCOPES = ['https://www.googleapis.com/auth/gmail.modify']
over-broad OAuth scope gmail.modify BrianArfi-ai-second-brain-080368d/.agent/skills/inbox-hub/scripts/inbox_sweep.py :362 scopes = ['https://www.googleapis.com/auth/gmail.modify']
over-broad OAuth scope https://mail.google.com/ expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/inbox-hub/scripts/inbox_sweep.py :409 permalink=f'https://mail.google.com/mail/u/0/#inbox/{tid}',
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/interview-assistant/scripts/cv_parser.py :35 creds = Credentials.from_authorized_user_file(token_path, ['https://www.googleapis.com/auth/drive'])
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/personal-drive-connector/gdrive_manager.py :60 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/personal-drive-connector/reauth.py :23 SCOPES = ["https://www.googleapis.com/auth/drive"]
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/secondary-drive-connector/gdrive_manager.py :57 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/work-drive-connector/gdrive_manager.py :58 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/work-drive-connector/patch_doc_links.py :28 SCOPES = ["https://www.googleapis.com/auth/drive"]
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/.agent/skills/work-drive-connector/reply_helper.py :10 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/scripts/set_gdoc_table_widths.py :38 SCOPES = ['https://www.googleapis.com/auth/drive']
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose BrianArfi-ai-second-brain-080368d/scripts/weekly_reports_tabs.py :45 SCOPES = ['https://www.googleapis.com/auth/drive']
committed secret Slack token BrianArfi-ai-second-brain-080368d/docs/workshop/PANDUAN_KONEKSI.md :272 xoxp-t…(23 chars, redacted)
committed secret Google OAuth client secret BrianArfi-ai-second-brain-080368d/tools/repo_check.py :238 GOCSPX…(35 chars, redacted)

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:BrianArfi/ai-second-brain/badge.svg)](https://mcpobservatory.com/servers/github:BrianArfi/ai-second-brain/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of BrianArfi.

BrianArfi/ai-second-brain

skills & prompt files 107

danger signals29

Navigate

Stream

Features

Display