Supertag CLI Skill
Integrates Tana workspace with CLI commands for full-text and semantic search, node management, and automation.
Install this skill
or
67/100
Security score
The Supertag CLI Skill skill was audited on Feb 23, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 13
Webhook reference - potential data exfiltration
SourceSKILL.md
| 13 | - **Webhook Server** - HTTP API for automation and Tana Commands |
medium line 975
Webhook reference - potential data exfiltration
SourceSKILL.md
| 975 | ## Webhook Server |
medium line 1003
Access to hidden dotfiles in home directory
SourceSKILL.md
| 1003 | Config file: `~/.config/supertag/config.json` |
medium line 1070
Access to hidden dotfiles in home directory
SourceSKILL.md
| 1070 | | Config | `~/.config/supertag/` | |
medium line 1071
Access to hidden dotfiles in home directory
SourceSKILL.md
| 1071 | | Data | `~/.local/share/supertag/` | |
medium line 1073
Access to hidden dotfiles in home directory
SourceSKILL.md
| 1073 | | Logs | `~/.local/state/supertag/` | |
low line 813
External URL reference
SourceSKILL.md
| 813 | supertag create video,towatch "Tutorial" --url https://example.com |
low line 1048
External URL reference
SourceSKILL.md
| 1048 | 1. **Tana API Token** - Get from https://app.tana.inc/?bundle=settings&panel=api |
low line 1061
External URL reference
SourceSKILL.md
| 1061 | | `TANA_LOCAL_API_URL` | Local API endpoint URL (default: `http://localhost:8262`) | |
Scanned on Feb 23, 2026
View Security DashboardInstall this skill with one command
/learn @jcfischer/supertag-cli-skill