Skip to main content

beads

Enables tracking of complex, multi-session work with dependency graphs, ensuring persistent context and management of dependencies.

Install this skill

or
74/100

Security score

The beads skill was audited on Mar 4, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 111

Access to hidden dotfiles in home directory

SourceSKILL.md
111- `~/.beads/` exists (global fallback database for any directory)
low line 125

Access to hidden dotfiles in home directory

SourceSKILL.md
125- [ ] If using global ~/.beads, mention this in report
medium line 141

Access to hidden dotfiles in home directory

SourceSKILL.md
141- Falls back to `~/.beads/default.db` otherwise
medium line 196

Access to hidden dotfiles in home directory

SourceSKILL.md
196- **Global fallback** (`~/.beads/`): Used when no project-local database exists
medium line 207

Access to hidden dotfiles in home directory

SourceSKILL.md
207- If not found, uses `~/.beads/default.db`
medium line 69

Prompting for password/secret input

SourceSKILL.md
69- IN PROGRESS: Current state + next immediate step ("testing password reset flow, need user input on email template")
Scanned on Mar 4, 2026
View Security Dashboard