Security audit
Hivemind
Security checks for vulnerabilities and agentic risk
Overview
Hivemind's shared-memory features are mostly disclosed, but it also automatically runs background agents that can mine past sessions into installed Claude skills, which needs careful review.
Review this before installing if your chats or repositories contain sensitive material. Install only if you want Deeplake-backed team memory and are comfortable with automatic capture, code-graph sync, long-lived local credentials, and possible background generation of Claude skills from prior sessions. Consider disabling capture when needed and periodically checking ~/.deeplake and ~/.claude/skills.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.