CtrlK
BlogDocsLog inGet started
Tessl Logo

onboarding

First-time vault setup and onboarding. Guides the user through a multi-phase conversation to collect preferences, life areas, integrations, and creates the full vault structure. Triggers: EN: "initialize the vault", "set up the vault", "onboarding", "vault setup". IT: "inizializza il vault", "configura il vault", "setup del vault". FR: "initialiser le vault", "configurer le vault". ES: "inicializar el vault", "configurar el vault". DE: "Vault initialisieren", "Vault einrichten". PT: "inicializar o vault", "configurar o vault". JA: "Vaultを初期化", "Vaultをセットアップ".

72

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Security

1 critical severity finding. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.

Critical

E006: Malicious code pattern detected in skill scripts.

What this means

Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.

Why it was flagged

The skill contains explicit instructions to connect Gmail/Calendar via CLI or MCP connectors and to write a .mcp.json pointing at external endpoints (gmail.mcp.claude.com / gcal.mcp.claude.com), and it instructs installing agents into the vault via copying; these steps enable third-party access to user email/calendar data and local installation of agent files — creating clear vectors for unauthorized data exfiltration or remote access if abused.

Report incorrect finding
Repository
gnekt/My-Brain-Is-Full-Crew
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.