CtrlK
BlogDocsLog inGet started
Tessl Logo

autodream-brain-sync

Syncs Claude Code's local memory system to Open Brain. Triggers whenever memories are saved via dreaming, autodream, or explicit "remember this" requests. After every local memory file write, captures the same content to Open Brain via mcp__open-brain__capture_thought so that memories are accessible from all connected AI clients (ChatGPT, Claude Desktop, Codex) and across all devices. Trigger on: memory saves, autodream, dreaming, "remember", "save to memory", or any write to the .claude/projects/*/memory/ directory.

74

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Security

2 findings: 1 critical severity, 1 high severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.

Critical

E006: Malicious code pattern detected in skill scripts.

What this means

Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.

Why it was flagged

This skill explicitly and automatically sends local user memory contents to an external "Open Brain" service on every memory save, which is a deliberate data-exfiltration behavior that can leak sensitive information.

Report incorrect finding
High

W007: Insecure credential handling detected in skill instructions.

What this means

The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.

Why it was flagged

The skill explicitly instructs the agent to send raw memory content verbatim to an external MCP via mcp__open-brain__capture_thought (no redaction), which can include API keys, passwords, or other secrets and therefore risks exfiltration.

Repository
NateBJones-Projects/OB1
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.