beads
Enables tracking of complex, multi-session work with dependency graphs, ensuring persistent context and management of dependencies.
Install this skill
or
74/100
Security score
The beads skill was audited on Mar 4, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 111
Access to hidden dotfiles in home directory
SourceSKILL.md
| 111 | - `~/.beads/` exists (global fallback database for any directory) |
low line 125
Access to hidden dotfiles in home directory
SourceSKILL.md
| 125 | - [ ] If using global ~/.beads, mention this in report |
medium line 141
Access to hidden dotfiles in home directory
SourceSKILL.md
| 141 | - Falls back to `~/.beads/default.db` otherwise |
medium line 196
Access to hidden dotfiles in home directory
SourceSKILL.md
| 196 | - **Global fallback** (`~/.beads/`): Used when no project-local database exists |
medium line 207
Access to hidden dotfiles in home directory
SourceSKILL.md
| 207 | - If not found, uses `~/.beads/default.db` |
medium line 69
Prompting for password/secret input
SourceSKILL.md
| 69 | - IN PROGRESS: Current state + next immediate step ("testing password reset flow, need user input on email template") |
Scanned on Mar 4, 2026
View Security DashboardInstall this skill with one command
/learn @arisng/beadsGitHub Stars 2
Rate this skill
Categoryproject management
UpdatedMarch 29, 2026
openclawproject-managerbusiness-process-analystdata-analystproject managementoperationsdata analytics
arisng/github-copilot-fc