Caveat verdict
limitless_lifelogs
limitless-lifelogs
45
🟠 Risky
Significant risk patterns flagged — automated deep scan, not behavioral proof.
The skill accesses sensitive credentials (LIMITLESS_API_KEY) and makes network requests, but does not appear to have malicious intent.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
85
security
70
transparency
70
maintenance
Findings (1)
Pattern match medium
Accesses shell history/config
install.sh · prose · downgraded · ~/.zshrc
Permissions & capabilities
Requires 1 environment variable. (1 sensitive: LIMITLESS_API_KEY). Requires 2 system binaries. (1 elevated: curl).
network_outcredential_access Is this flag fair?
Thanks — recorded.