Skip to main content

granola

Facilitates importing, listing, and exporting Granola meeting recordings and transcripts to Obsidian in a Fathom-compatible format.

Install this skill

or
86/100

Security score

The granola skill was audited on May 19, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 19

Access to hidden dotfiles in home directory

SourceSKILL.md
19python3 ~/.claude/skills/granola/scripts/granola.py <command> [options]
low line 45

Access to hidden dotfiles in home directory

SourceSKILL.md
45python3 ~/.claude/skills/granola/scripts/granola.py list
low line 46

Access to hidden dotfiles in home directory

SourceSKILL.md
46python3 ~/.claude/skills/granola/scripts/granola.py list --format json
low line 47

Access to hidden dotfiles in home directory

SourceSKILL.md
47python3 ~/.claude/skills/granola/scripts/granola.py list --after 2026-05-01
low line 52

Access to hidden dotfiles in home directory

SourceSKILL.md
52python3 ~/.claude/skills/granola/scripts/granola.py show not_5FkswTp4Omkpm5
low line 53

Access to hidden dotfiles in home directory

SourceSKILL.md
53python3 ~/.claude/skills/granola/scripts/granola.py show not_5FkswTp4Omkpm5 --transcript --format json
low line 58

Access to hidden dotfiles in home directory

SourceSKILL.md
58python3 ~/.claude/skills/granola/scripts/granola.py export not_5FkswTp4Omkpm5
low line 59

Access to hidden dotfiles in home directory

SourceSKILL.md
59python3 ~/.claude/skills/granola/scripts/granola.py export not_5FkswTp4Omkpm5 --vault ~/Brains/brain
medium line 13

Access to .env file

SourceSKILL.md
13- API key in sops-encrypted `~/Brains/brain/.env.granola` as `GRANOLA_API_KEY=grn_...`
low line 89

External URL reference

SourceSKILL.md
89- **Base URL**: `https://public-api.granola.ai/v1`
Scanned on May 19, 2026
View Security Dashboard
Installation guide →