Audit privacy
SkillDev toolsAudit the vault for material that should not be in it: credentials, other people's private information, confidential work, and anything the user would not want synced or backed up. Use this skill when the user asks about privacy, is about to share or sync the vault, has just imported chat history or meeting notes, or asks what is sensitive in their notes. Do NOT use to delete anything on your own, or as a substitute for the publishing check.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Audit privacy skill
What this skill tells your AI
The instructions your AI receives, as published by undefined-ui/second-brain-os in skills/second-brain-privacy/SKILL.md and read by ahel’s review.
A mature vault is one of the highest-signal documents about a person that exists, and it lives in a folder that gets synced, committed, backed up and occasionally shared. Every copy is another place the content exists.
Core rule
Find and report. Delete nothing without an explicit instruction naming what to remove.
Workflow
- Scan for credentials: API keys, tokens, passwords, connection strings.
Check
.obsidian/plugins/too, where plugin data lives. - Find other people's information: meeting transcripts, personal messages, anything told in confidence, health or financial detail about someone else.
- Find confidential work: material under NDA or employer restriction.
- Check the git remote. Private material in a public repo is the most expensive version of this problem.
- Report by severity, with the specific file and why.
Output format
Critical: <credentials, must be removed and rotated>
High: <other people's private information>
Review: <material the user should decide about>
Repo visibility: <public | private> - <verdict>
Calibration
Never quote the credential itself in the report. Name the file and the type.
Redaction after ingest is unreliable, because material has already propagated into concept pages and links. When something should not be there, say what else would need removing with it.
Signals
- GitHub stars
- 57
- Forks
- 8
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
second-brain-privacy- Source
- github.com/undefined-ui/second-brain-os