brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).
Security
Findings: 4Files checked: 8 of 8. Code blocks and scripts analysed: 22. Risk score: 80 of 100. Static analysis does not guarantee safety: it finds only known techniques.
HighDeletes a broad or computed pathscripts/stop-server.sh:114
rm -rf "$SESSION_DIR"
The target is a home directory, a wildcard or a variable, so one bad value erases user data.
What to do: Limit deletion to a fixed folder inside the project and ask first.
MediumSends data, but the description does not say soscripts/helper.js:75
new WebSocket(websocketUrl())
The description promises "You MUST use this before any creative work - creating features, building compone", yet the code makes outbound requests.
What to do: State in the description what is sent and where.
MediumDeletes data, but the description does not say soscripts/server.cjs:604
if (fs.existsSync(eventsFile)) fs.unlinkSync(eventsFile);
Nothing in "You MUST use this before any creative work - creating features, buildi" suggests this skill removes files.
What to do: Say what is deleted, or remove the step.
MediumDeletes data, but the description does not say soscripts/server.cjs:619
if (fs.existsSync(infoFile)) fs.unlinkSync(infoFile);
Nothing in "You MUST use this before any creative work - creating features, buildi" suggests this skill removes files.
What to do: Say what is deleted, or remove the step.
Effect by model
This version has not been measured. We do not know whether the skill helps an agent. The recommendation rests on static analysis only.
Compatibility and permissions
Not measured- Declared tools
- none
- Inferred from files
- BashNetworkWrite
- Programs
- gomakenode
- External hosts
- github.comprimeradiant.com
- Environment variables
- BIND_HOSTBRAINSTORM_DIRBRAINSTORM_HOSTBRAINSTORM_IDLE_TIMEOUT_MSBRAINSTORM_LIFECYCLE_CHECK_MSBRAINSTORM_OPENBRAINSTORM_OPEN_CMDBRAINSTORM_OWNER_PIDBRAINSTORM_PORTBRAINSTORM_PORT_FILEBRAINSTORM_TOKENBRAINSTORM_TOKEN_FILEBRAINSTORM_URL_HOSTCODEX_CIFORCE_BACKGROUNDFOREGROUNDIDLE_TIMEOUT_MINUTESLOG_FILEMSYSTEMOSTYPEOWNER_PIDPID_FILEPPIDPROJECT_DIRRANDOMSCRIPT_DIRSERVER_IDSERVER_ID_FILESERVER_PIDSESSION_DIRSESSION_IDSTATE_DIRURL_HOST