hindsight-self-hosted
Store team knowledge, project conventions, and learnings from tasks. Use to remember what works and recall context before new tasks. Connects to a self-hosted Hindsight server. (user)
Install this skill
or
61/100
Security score
The hindsight-self-hosted skill was audited on Aug 19, 2026 and we found 7 security issues across 4 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 24
Piping content to bash shell
SourceSKILL.md
| 22 | 1. **Install the CLI** (if `hindsight` command not found): |
| 23 | ```bash |
| 24 | curl -fsSL https://hindsight.vectorize.io/get-cli | bash |
| 25 | ``` |
| 26 |
medium line 24
Curl to non-GitHub URL
SourceSKILL.md
| 22 | 1. **Install the CLI** (if `hindsight` command not found): |
| 23 | ```bash |
| 24 | curl -fsSL https://hindsight.vectorize.io/get-cli | bash |
| 25 | ``` |
| 26 |
low line 17
Access to home directory dotfiles
SourceSKILL.md
| 15 | |
| 16 | ```bash |
| 17 | cat ~/.hindsight/config |
| 18 | ``` |
| 19 |
low line 32
Access to home directory dotfiles
SourceSKILL.md
| 30 | |
| 31 | ```bash |
| 32 | mkdir -p ~/.hindsight |
| 33 | cat > ~/.hindsight/config << 'EOF' |
| 34 | api_url = "<user's server URL>" |
low line 33
Access to home directory dotfiles
SourceSKILL.md
| 31 | ```bash |
| 32 | mkdir -p ~/.hindsight |
| 33 | cat > ~/.hindsight/config << 'EOF' |
| 34 | api_url = "<user's server URL>" |
| 35 | api_key = "<user's API key>" |
low line 37
Access to home directory dotfiles
SourceSKILL.md
| 35 | api_key = "<user's API key>" |
| 36 | EOF |
| 37 | chmod 600 ~/.hindsight/config |
| 38 | ``` |
| 39 |
high line 24
Curl pipe to interpreter
SourceSKILL.md
| 22 | 1. **Install the CLI** (if `hindsight` command not found): |
| 23 | ```bash |
| 24 | curl -fsSL https://hindsight.vectorize.io/get-cli | bash |
| 25 | ``` |
| 26 |
Scanned on Aug 19, 2026
View Security Dashboard