Caveat verdict
brainhack-adhd-sidekick
The skill does not use any capabilities that could be considered risky or dangerous, and serves a legitimate purpose of aiding ADHD minds.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (3)
References agent memory files
README.md ยท code ยท MEMORY.md
Popular HTTP library โ network access
skills/social-scripter/SKILL.md ยท code ยท got
Instructs covert action โ may act without user awareness
ROUTER.md ยท prose ยท downgraded ยท silently
Permissions & capabilities
No declared permissions โ minimal attack surface.
Is this flag fair?
Thanks โ recorded.