gbrain-cli-5e52cf — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gbrain-cli-5e52cf (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
GBrain is a local CLI plus a local SQLite database, not a hosted web service.
The stable mental model is:
gbrainbrain.dbgbrain serve --db /absolute/path/to/brain.dbIf someone says "deploy GBrain", translate that into one of three jobs:
brain.dbgbrain servePrimary repo docs:
Use this skill when someone asks how to:
gbrainDo not use this skill for schema design, search ranking, or migration debugging inside the repo. That is code work, not operator guidance.
From source:
git clone https://github.com/laozhong86/gbrain.git
cd gbrain
bun install
bun run check
bun test
bun run buildInstall the binary into PATH:
mkdir -p ~/.local/bin
cp bin/gbrain ~/.local/bin/gbrain
chmod +x ~/.local/bin/gbrainRecommended local data path:
mkdir -p ~/.gbrain
gbrain init ~/.gbrain/main.db
gbrain stats --db ~/.gbrain/main.dbOpenClaw-specific preset:
export GBRAIN_PROFILE=openclaw
gbrain init
gbrain statsThat preset resolves the default database path to ~/.openclaw/brain.db while keeping the generic CLI behavior unchanged for everyone else.
Minimum smoke checks:
gbrain version
gbrain --tools-json
gbrain stats --db ~/.gbrain/main.dbLexical search works without any model key:
gbrain search "Jensen Huang" --db ~/.gbrain/main.dbEmbeddings and hybrid query require a provider key.
OpenAI:
export OPENAI_API_KEY=your_keyOpenRouter:
export OPENROUTER_API_KEY=your_key
export OPENROUTER_HTTP_REFERER=https://your-site.example
export OPENROUTER_X_TITLE=GBrainCurrent provider behavior:
OPENAI_API_KEY exists, use OpenAIOPENROUTER_API_KEY exists, use OpenRouterEMBEDDING_BASE_URL or OPENAI_BASE_URL can override the embeddings endpointTypical verification:
gbrain embed --all --db ~/.gbrain/main.db
gbrain query "who knows Jensen Huang?" --db ~/.gbrain/main.dbIf embeddings fail, check the environment first before debugging the code.
Every client uses the same stdio server shape:
{
"mcpServers": {
"gbrain": {
"command": "gbrain",
"args": ["serve", "--db", "/absolute/path/to/brain.db"]
}
}
}If gbrain is not in PATH, use the absolute binary path instead:
{
"mcpServers": {
"gbrain": {
"command": "/Users/x/.local/bin/gbrain",
"args": ["serve", "--db", "/Users/x/.gbrain/main.db"]
}
}
}Place the MCP entry in Claude Code's MCP config or UI using the stdio shape above.
Verification:
gbrain serve --db ~/.gbrain/main.db
gbrain --tools-jsonCodex uses the same stdio MCP shape. Prefer an absolute binary path and a stable absolute database path.
OpenClaw works best by treating GBrain as a stdio MCP server plus a local skill pack.
Minimal MCP config:
{
"mcp": {
"servers": {
"gbrain": {
"command": "gbrain",
"args": ["serve", "--db", "/Users/x/.openclaw/brain.db"]
}
}
}
}If you want OpenClaw-native defaults, set:
export GBRAIN_PROFILE=openclawThen gbrain init, gbrain stats, and gbrain serve all resolve to ~/.openclaw/brain.db unless --db or GBRAIN_DB overrides it.
OpenClaw also supports the shipped skill pack and session ingest hook. See:
If GBrain was installed from a compiled binary:
gbrain upgrade --check
gbrain upgradeImportant constraints:
gbrain binaryIf self-update is unavailable for the platform, do the manual path:
git pull
bun install
bun run check
bun test
bun run build
cp bin/gbrain ~/.local/bin/gbrain
chmod +x ~/.local/bin/gbrainNever put real keys in:
.env files that might be committedTreat these as local-only runtime data:
~/.gbrain/main.dbbrain.db, brain.db-wal, brain.db-shmOPENAI_API_KEY and OPENROUTER_API_KEYIf someone pastes a real key into chat or logs, tell them to rotate it.
If gbrain init or gbrain stats says database is locked, clear the stale local db files and retry:
rm -f ~/.gbrain/main.db ~/.gbrain/main.db-wal ~/.gbrain/main.db-shm
gbrain init ~/.gbrain/main.dbIf gbrain query fails but gbrain search works, it is almost always an embeddings credential or endpoint problem.
If MCP tools do not appear, check in this order:
gbrain versiongbrain --tools-jsongbrain stats --db ~/.gbrain/main.dbgbrain serve --db ~/.gbrain/main.dbIf gbrain upgrade --check returns a release lookup error, either the release does not exist yet or the installed binary cannot reach GitHub.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.