itechmeat/open-second-brain

Review signals: 1 connection review, 1 download and execute, 4 hardcoded secret, 1 sensitive read. 14 static matches retained as context.

Reviewed as expected for a test run: read only test files inside the test workspace or its temporary folders.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 24 distinct locations. 2 attributed processes.

Source contains download and execute; review its purpose. scripts/_bun-precheck.sh

Gitleaks found a possible hardcoded secret; value withheld. docs/brainstorm/manifest-dependency-facts/cli-output/expected-output.md 4 findings.

A repository process attempted to read this sensitive path. <guest-path> 1 attributed processes.

PID 2839: <guest-path> · <guest-path>

1 download and execute matches retained as context; full list in the evidence.

13 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• MCP keyword search returns the note written through the vault: Real input produced the expected result: hello from probe

  Source: Keyword search with an optional semantic lane, result explanations, recall profiles and compact cards

  Input: {"tool": "brain_search", "arguments": {"query": "hello from probe"}}

  Expected: the Brain log note containing hello from probe is returned

  Command: o2b mcp --vault <guest-path> tools/call {"tool": "brain_search", "arguments": {"query": "hello from probe"}}

  Observed: hello from probe\\n- agent: claude-haiku-probe\\n- origin_channel: cli\\n## 04:03:36Z — note\\n- text: example note from probe\\n- agent: claude-haiku-probe\\n- origin_channel: cli\",\n \"endLine\": 17,\n \"path\": \"Brain/log/2026-10-24.b31d7023.md\",\n \"reasons\": [\n \"fts5_bm25: 1.000\",\n \"activation: 0.016\",\n \"recency: 0.050\"\n ],\n \"score\": 0.6659976269378894,\n \"searchType\": \"keyword\",\n \"startLine\": 7,\n \"title\": \"Brain log — 2026-10-24\"\n }\n ],\n \"total\": 1,\n \"warnings\": []\n}"}], "structuredCo

Examples

• Record a note from the CLI into the Brain log: command completed successfully

  Source: install/prerequisites.md

  Input: brain note text: example note from probe

  Expected: note logged to Brain/log

  Command: o2b brain note 'example note from probe' --vault <guest-path>

  Observed: logged note at Brain/log/2026-10-24.b31d7023.md

Cycles

• Scheduled Brain digest runs the dream/activity summary once per trigger: Triggered one cycle by hand (run-once: the cron command run by hand, no fake clock; normal trigger: 0 20 * * * (external Hermes cron; not run by the product itself)): # Brain digest — 2026-10-24T04:03Z (24h) Window: 2026-10-23T04:03:46.908Z — 2026-10-24T04:03:46.908Z ## Agent summary (1) - **claude-haiku-probe** 2 events (feedback: 0, apply: 0, note: 2)

  Source: docs/hermes-cron.md

  Input: --vault <guest-path> --silent-if-empty

  Expected: digest markdown printed to stdout

  Command: o2b brain digest --vault <guest-path> --silent-if-empty

  Observed: # Brain digest — 2026-10-24T04:03Z (24h) Window: 2026-10-23T04:03:46.908Z — 2026-10-24T04:03:46.908Z ## Agent summary (1) - **claude-haiku-probe** 2 events (feedback: 0, apply: 0, note: 2)

Local or hosted: local

Create a vault, write a note with the o2b CLI, then find it through the MCP brain_search tool over stdio

cd <guest-path> && pwd && ls -la && id -u && python3 --version && git -C . status 2>&1 | head -3; test -f README.md && head -c 6000 README.md
ls -la /inputs 2>&1; ls -la <guest-path> 2>&1; cat /etc/os-release | head -2
cd <guest-path> && tail -c +6000 README.md | head -c 12000; echo ----; cat install/prerequisites.md | head -c 5000
command -v bun >/dev/null 2>&1 || curl -fsSL https://bun.sh/install | bash; export PATH="$HOME/.bun/bin:$PATH"; bun --version 2>&1; which node npm 2>&1; node --version 2>&1
sudo -n true && echo SUDO_OK; sudo -n apt-get install -y unzip 2>&1 | tail -3; command -v unzip
sudo -n apt-get update 2>&1 | tail -3; sudo -n apt-get install -y unzip 2>&1 | tail -2; command -v unzip && curl -fsSL https://bun.sh/install | bash 2>&1 | tail -5; export PATH="$HOME/.bun/bin:$PATH"; bun --version
cd <guest-path> && ls scripts && head -60 scripts/o2b; echo ----; grep -rn "install-cli" scripts/o2b | head
cd <guest-path> && export PATH="$HOME/.bun/bin:$PATH" && cat package.json | head -60 && ls node_modules 2>/dev/null | head -2; echo ---; grep -n -i "install\|bun" install.md | head -30
cd <guest-path> && export PATH="$HOME/.bun/bin:$PATH" && ./scripts/o2b install-cli 2>&1 | tail -15; echo "rc=$?"; export PATH="$HOME/.local/bin:$PATH"; o2b version 2>&1 | tail -5
export PATH="$HOME/.local/bin:$HOME/.bun/bin:$PATH"; cd <guest-path> && mkdir -p <guest-path> && o2b init --vault <guest-path> --name "My Second Brain" </dev/null 2>&1 | tail -20; echo "rc=$?"; o2b brain init --vault <guest-path> </dev/null 2>&1 | tail -20; echo; grep -rn -i "telemetry" <guest-path> <guest-path> | head -5
export PATH="$HOME/.local/bin:$HOME/.bun/bin:$PATH"; cd <guest-path> && o2b init --vault <guest-path> --agent-name claude-haiku-probe </dev/null 2>&1 | tail -3; o2b brain note "hello from probe" --vault <guest-path> </dev/null 2>&1 | tail -5; echo rc=$?; cd <guest-path> && head -c 5000 docs/mcp.md
cd <guest-path> && grep -n -i "o2b-mcp\|stdio\|--vault\|api-key\|brain_note\|brain_search" docs/mcp.md | head -50; echo ---; cat scripts/o2b-mcp | head -30
export PATH="$HOME/.local/bin:$HOME/.bun/bin:$PATH"; cd <guest-path> && o2b search index --vault <guest-path> </dev/null 2>&1 | tail -3; printf '%s\n' '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"t","version":"1"}}}' '{"jsonrpc":"2.0","method":"notifications/initialized"}' '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"brain_search","arguments":{"query":"hello from probe"}}}' | timeout 60 o2b mcp --vault <guest-path> 2><guest-path> | head -c 3000; echo; echo rc=$?; head -5 <guest-path>
cd <guest-path> && grep -rln -i "setInterval\|--once\|--now\|cron" src/cli | head; grep -rn -i "\-\-once\|--now\|setInterval" src/cli | head -8; echo ---; grep -n "cycles\|examples.json\|expected_file" <guest-path> | head -40; ls tests | head -30; grep -n "\"test\"" -A2 scripts/test | head; cat scripts/test | head -30
cd <guest-path> && head -c 1500 docs/hermes-cron.md; echo; echo ---; sed -n 1,30p src/cli/search-cron-template.ts | head -40; echo ---; grep -rn "setTimeout\|setInterval\|while (true)" src/cli/brain/verbs/dream.ts src/cli/main.ts 2>/dev/null | head
export PATH="$HOME/.local/bin:$HOME/.bun/bin:$PATH"; cd <guest-path> && o2b brain digest --vault <guest-path> --no-agent --script 2>&1 | head -30; echo "rc=${PIPESTATUS[0]}"; o2b brain digest --vault <guest-path> --help 2>&1 | head -5
export PATH="$HOME/.local/bin:$HOME/.bun/bin:$PATH"; cd <guest-path> && o2b brain digest --vault <guest-path> 2>&1 | head -30; echo "rc=${PIPESTATUS[0]}"; echo ---; o2b brain digest --vault <guest-path> --silent-if-empty 2>&1 | head -10; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && mkdir -p .coldpass && ENV='{"PATH":"<guest-path>","HOME":"<guest-path>"}' && cat > .coldpass/probe.json <<EOF
{"kind":"mcp","argv":["o2b","mcp","--vault","<guest-path>"],"cwd":"<guest-path>","env":$ENV,"tool":"brain_search","arguments":{"query":"hello from probe"},"expected_text":"hello from probe"}
EOF
cat > .coldpass/claims.json <<EOF
[{"kind":"claim","claim":"MCP keyword search returns the note written through the vault","source":"Keyword search with an optional semantic lane, result explanations, recall profiles and compact cards","input":"query hello from probe","expected":"the Brain log note containing hello from probe is returned","probe_kind":"mcp","argv":["o2b","mcp","--vault","<guest-path>"],"env":$ENV,"tool":"brain_search","arguments":{"query":"hello from probe"},"expected_text":"hello from probe","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<EOF
[{"kind":"example","claim":"Record a note from the CLI into the Brain log","source":"install/prerequisites.md","input":"brain note text: example note from probe","expected":"note logged to Brain/log","argv":["o2b","brain","note","example note from probe","--vault","<guest-path>"],"cwd":"<guest-path>","env":$ENV,"expected_text":"logged note at"}]
EOF
cat > .coldpass/cycles.json <<EOF
{"detected":true,"checks":[{"claim":"Scheduled Brain digest runs the dream/activity summary once per trigger","source":"docs/hermes-cron.md","quote":"o2b brain digest --vault /path/to/vault --silent-if-empty","schedule":"0 20 * * * (external Hermes cron; not run by the product itself)","method":"run-once: the cron command run by hand, no fake clock","input":"--vault <guest-path> --silent-if-empty","expected":"digest markdown printed to stdout","kind":"cli","argv":["o2b","brain","digest","--vault","<guest-path>","--silent-if-empty"],"cwd":"<guest-path>","env":$ENV,"expected_text":"# Brain digest"}]}
EOF
for f in probe claims examples cycles; do python3 -I -c "import json,sys;json.load(open(sys.argv[1]));print('ok',sys.argv[1])" .coldpass/$f.json; done
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Create a vault, write a note with the o2b CLI, then find it through the MCP brain_search tool over stdio","operation_scope":"Linux Ubuntu 24.04, Python 3.12.3 present (not needed by the product), Bun 1.4.4 installed, local vault at <guest-path> Telemetry/consent prompts not reached: init and brain init ran non-interactively; no client config was written (no install --apply). Hermes cron scheduling is external and was not run as a daemon; the digest command was run once by hand.","steps":["curl -fsSL https://bun.sh/install | bash (README prerequisites; first attempt failed, see deviations)","export PATH=\"$HOME/.bun/bin:$PATH\"; bun --version -> 1.4.4","./scripts/o2b install-cli (README 'Get the o2b CLI')","o2b version -> 1.93.0","o2b init --vault <guest-path> --name \"My Second Brain\"","o2b brain init --vault <guest-path>","o2b init --vault <guest-path> --agent-name claude-haiku-probe","o2b brain note \"hello from probe\" --vault <guest-path> -> logged note at Brain/log/2026-10-24.b31d7023.md","o2b search index --vault <guest-path>","o2b mcp --vault <guest-path> (stdio JSON-RPC: initialize, tools/call brain_search query 'hello from probe') -> returned the note","o2b brain digest --vault <guest-path> --silent-if-empty -> '# Brain digest' markdown"],"deviations":["Bun installer failed first with 'error: unzip is required to install bun'. Fixed by sudo -n apt-get update && sudo -n apt-get install -y unzip (the first apt-get install failed with 'Unable to locate package unzip' because the package index was empty), then re-ran the README's curl|sh Bun installer.","scripts/o2b install-cli installed the links to <guest-path> because HOME is <guest-path> in this guest.","The workspace is not a git checkout, so the pinned-commit git fetch step was not run; the source snapshot was used as supplied.","Brain digest is cron-scheduled externally (Hermes cron in docs/hermes-cron.md). The product has no internal scheduler, so the cycle check runs the same command once by hand instead of waiting for 20:00 UTC."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":"None for the tested path. Optional: the install docs could list unzip as a Bun prerequisite on minimal Ubuntu images."}
EOF
python3 -I -c "import json;json.load(open('.coldpass/report.json'));print('report ok')"; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60
pgrep -af "o2b|open-second-brain|src/cli/main.ts" | grep -v pgrep || echo "no o2b processes running"