cc-second-brain

SUSPICIOUS: the core behavior fits a memory-management skill, but it implicitly relies on third-party Obsidian MCP/community plugin infrastructure that can receive vault data and API credentials. The skill is not overtly malicious and has no direct installer payload, yet its trust boundary is under-specified and broader than ideal for a local knowledge tool.