hindsight-docs

Fail

Audited by Runlayer on Mar 13, 2026

Risk Level: HIGH
Scan Summary
Max Score
97%
Files
42
Flagged
30
Chunks
69
Flagged Files (30)
hindsight-docs/references/developer/mcp-server.mdHIGH
96.8%

Malicious tool definition detected

hindsight-docs/references/sdks/integrations/skills.mdHIGH
94.5%

Malicious tool definition detected

Try being explicit: - "Remember that..." triggers storage - "What do you know about..." triggers recall ### Local Mode Issues **Daemon not starting:** ```bash uvx hindsight-embed daemon status uvx hindsight-embed daemon logs ``` **Reconfigure LLM provider:** ```bash uvx hindsight-embed configure ``` ### Cloud Mode Issues **Authentication errors:** ```bash # Verify your config cat ~/.hindsight/config # Test connection manually hindsight bank list ``` **Wrong bank ID:** Check your SKILL.md file to

hindsight-docs/references/developer/monitoring.mdHIGH
93.1%

Malicious tool definition detected

hindsight-docs/references/developer/api/quickstart.mdHIGH
92.4%

Malicious tool definition detected

{/* Import raw source files */} ## Start the API Server ### pip (API only) ```bash pip install hindsight-api export OPENAI_API_KEY=sk-xxx export HINDSIGHT_API_LLM_API_KEY=$OPENAI_API_KEY hindsight-api ``` API available at [http://localhost:8888](http://localhost:8888/docs) ### Docker (Full Experience) ```bash export OPENAI_API_KEY=sk-xxx docker run --rm -it --pull always -p 8888:8888 -p 9999:9999 \ -e HINDSIGHT_API_LLM_API_KEY=$OPENAI_API_KEY \ -v $HOME/.hindsight-docker:/home/hindsight/.pg0 \ g

hindsight-docs/references/developer/installation.mdHIGH
91.9%

Malicious tool definition detected

hindsight-docs/references/sdks/integrations/local-mcp.mdHIGH
90.9%

Malicious tool definition detected

- Starts an embedded PostgreSQL (pg0) automatically - Runs database migrations on startup - Exposes the full MCP endpoint at `http://localhost:8888/mcp/` - Data persists in `~/.pg0/hindsight-mcp/` across restarts ## Setup ### 1. Start the server ```bash HINDSIGHT_API_LLM_API_KEY=sk-...

hindsight-docs/references/sdks/integrations/openclaw.mdHIGH
90.4%

Shadow Persistence

Privilege Escalation

Supply Chain Compromise

Data Exfiltration

Context Poisoning

hindsight-docs/references/developer/models.mdMEDIUM
88.9%

Malicious tool definition detected

Data Exfiltration

Supply Chain Compromise

hindsight-docs/references/developer/configuration.mdMEDIUM
87.9%

Tool passed security scan

Data Exfiltration

Prompt Injection

Context Poisoning

Guardrail Bypass

Resource Abuse

Supply Chain Compromise

hindsight-docs/references/developer/development.mdMEDIUM
87.7%

Malicious tool definition detected

Configure Environment ```bash cp .env.example .env ``` Edit `.env` with your LLM API key: ```bash # Database (connects to Docker postgres) HINDSIGHT_API_DATABASE_URL=postgresql://hindsight:hindsight_dev@localhost:5432/hindsight # LLM Provider (choose one) HINDSIGHT_API_LLM_PROVIDER=groq HINDSIGHT_API_LLM_API_KEY=gsk_xxxxxxxxxxxx HINDSIGHT_API_LLM_MODEL=llama-3.1-70b-versatile ``` ### 5.

hindsight-docs/references/sdks/cli.mdMEDIUM
84.5%

Malicious tool definition detected

## Installation ```bash curl -fsSL https://hindsight.vectorize.io/get-cli | bash ``` ## Configuration Configure the API URL: ```bash # Interactive configuration hindsight configure # Or set directly hindsight configure --api-url http://localhost:8888 # With API key for authentication hindsight configure --api-url http://localhost:8888 --api-key your-api-key # Or use environment variables (highest priority) export HINDSIGHT_API_URL=http://localhost:8888 export HINDSIGHT_API_KEY=your-api-key ``` #

hindsight-docs/references/sdks/integrations/litellm.mdMEDIUM
82.6%

Malicious tool definition detected

hindsight-docs/references/developer/api/retain.mdMEDIUM
79.5%

Tool passed security scan

Malicious tool definition detected

Each scope runs an independent pass, creating or updating observations tagged with only that scope's tags. :::info Scope isolation During consolidation, Hindsight uses `all_strict` matching to find existing observations to update — only observations whose tags exactly match the current scope are considered. This keeps scopes isolated: a memory consolidated under `["student:alice"]` will never bleed into an observation tagged `["student:alice", "teacher:bob"]`.

hindsight-docs/references/developer/storage.mdMEDIUM
78.6%

Malicious tool definition detected

hindsight-docs/references/developer/api/recall.mdMEDIUM
75.6%

Tool passed security scan

Malicious tool definition detected

hindsight-docs/references/developer/api/webhooks.mdLOW
74.6%

Risky tool definition detected

hindsight-docs/references/sdks/integrations/crewai.mdLOW
72.0%

Malicious tool definition detected

hindsight-docs/references/developer/admin-cli.mdLOW
71.7%

Destructive Action

hindsight-docs/references/developer/api/memory-banks.mdLOW
71.4%

Tool passed security scan

Prompt Injection

Guardrail Bypass

hindsight-docs/references/developer/services.mdLOW
69.7%

Tool passed security scan

hindsight-docs/references/sdks/integrations/ai-sdk.mdLOW
68.7%

Tool passed security scan

hindsight-docs/references/developer/performance.mdLOW
68.4%

Tool passed security scan

hindsight-docs/references/sdks/integrations/pydantic-ai.mdLOW
66.9%

Tool passed security scan

hindsight-docs/references/sdks/embed.mdLOW
65.3%

Tool passed security scan

hindsight-docs/references/developer/api/operations.mdLOW
64.5%

Tool passed security scan

hindsight-docs/references/developer/extensions.mdLOW
62.2%

Tool passed security scan

hindsight-docs/references/developer/api/reflect.mdLOW
62.1%

Tool passed security scan

hindsight-docs/references/sdks/integrations/chat.mdLOW
57.8%

Tool passed security scan

hindsight-docs/references/developer/observations.mdLOW
56.6%

Tool passed security scan

hindsight-docs/references/developer/api/mental-models.mdLOW
55.0%

Tool passed security scan

Passed Files (12)Click to expand
hindsight-docs/references/developer/retrieval.mdOK
49.8%

Tool passed security scan

hindsight-docs/references/developer/retain.mdOK
44.0%

Tool passed security scan

hindsight-docs/references/sdks/python.mdOK
42.8%

Tool passed security scan

hindsight-docs/references/developer/index.mdOK
37.7%

Tool passed security scan

hindsight-docs/references/developer/api/documents.mdOK
37.6%

Tool passed security scan

hindsight-docs/references/sdks/nodejs.mdOK
34.2%

Tool passed security scan

hindsight-docs/references/developer/reflect.mdOK
32.2%

Tool passed security scan

hindsight-docs/SKILL.mdOK
30.3%

Tool passed security scan

hindsight-docs/references/developer/api/main-methods.mdOK
24.1%

Tool passed security scan

hindsight-docs/references/developer/multilingual.mdOK
16.4%

Tool passed security scan

hindsight-docs/references/sdks/go.mdOK
15.7%

Tool passed security scan

hindsight-docs/references/developer/rag-vs-hindsight.mdOK
13.1%

Tool passed security scan

Audit Metadata
Max File Score
97%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
42
Files Flagged
30
Chunks Analyzed
69
Analyzed
Mar 13, 2026, 08:24 PM
Security Audit — runlayer — hindsight-docs