ocas-vesper

Generates concise daily briefings by aggregating signals and outcomes, enhancing decision-making without exposing internal processes.

Install this skill

85/100

Security score

The ocas-vesper skill was audited on Sep 25, 2026 and we found 3 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 201

Access to home directory dotfiles

SourceSKILL.md

199	Procedure: See `references/update-procedure.md` for the full update workflow including conflict resolution and profile sync. Key points:
200	- If local modifications block `git pull`: stash, move conflicting untracked files, pull, stash pop, resolve conflicts
201	- After pulling: sync the profile copy (`~/.hermes/profiles/indigo/skills/ocas-vesper/`) — sessions load from there, not the git repo
202
203	## Visibility

medium line 246

Access to home directory dotfiles

SourceSKILL.md

244	\| `references/cron-mode-briefing-generation.md` \| During cron job execution — complete end-to-end workflow with pitfalls and solutions \|
245	\| `references/jsonl-debug.md` \| When briefings.jsonl has corrupted entries — diagnosis and repair of bracket mismatches \|
246	\| `scripts/quality_check.py` \| After generating a briefing file — automated validation. Run with absolute path: `python3 ~/.hermes/profiles/indigo/skills/ocas-vesper/scripts/quality_check.py <briefing.json>`. Returns `PASS` or `FAIL` with specific terms/sctions that need fixing. \|
247	\| `scripts/delivery_check.py` \| During delivery-check cron runs — scans individual files + `briefings.jsonl` for undelivered briefings (applies the dual delivery-flag/desync rules), and with `--deliver` sends via the Telegram fallback when the email MCP is unavailable, then updates both records with a surgical line edit (preserves corrupted sibling JSONL lines byte-for-byte). Run `python3 ~/.hermes/profiles/indigo/skills/ocas-vesper/scripts/delivery_check.py --type morning --deliver`. \|
248

medium line 247

Access to home directory dotfiles

SourceSKILL.md

245	\| `references/jsonl-debug.md` \| When briefings.jsonl has corrupted entries — diagnosis and repair of bracket mismatches \|
246	\| `scripts/quality_check.py` \| After generating a briefing file — automated validation. Run with absolute path: `python3 ~/.hermes/profiles/indigo/skills/ocas-vesper/scripts/quality_check.py <briefing.json>`. Returns `PASS` or `FAIL` with specific terms/sctions that need fixing. \|
247	\| `scripts/delivery_check.py` \| During delivery-check cron runs — scans individual files + `briefings.jsonl` for undelivered briefings (applies the dual delivery-flag/desync rules), and with `--deliver` sends via the Telegram fallback when the email MCP is unavailable, then updates both records with a surgical line edit (preserves corrupted sibling JSONL lines byte-for-byte). Run `python3 ~/.hermes/profiles/indigo/skills/ocas-vesper/scripts/delivery_check.py --type morning --deliver`. \|
248
249	## Support Files

Scanned on Sep 25, 2026

View Security Dashboard

Installation guide →

GitHub Stars 1

Rating

5.01

Rate this skill

Categorysales

UpdatedSeptember 26, 2026

indigokarasu/vesper