smixs/agent-second-brain: source audit, 2026-10-10
Read from the source at commit 7828ed62cf76; the bot was not run (it needs a BotFather token). Each answer cites the file and line that shows it. All 20 bots
In short
Denies everyone when the allowlist is empty (its .env.example wrongly says empty = allow all). Claude Code runs on the host with permissions skipped; never set ALLOW_ALL_USERS=true.
What the source shows
| Answer | Where | |
|---|---|---|
| Who can use it | Serves nobody until you list your Telegram ID | src/d_brain/bot/main.py:80-82 — if user.id not in settings.allowed_user_ids: return None |
| With no allowlist set | env ALLOWED_USER_IDS (empty = every update dropped); ALLOW_ALL_USERS default false | src/d_brain/bot/main.py:72-77 — Access denied: no allowed_user_ids configured and allow_all_users is False |
| Before the agent acts | runs the agent with permission prompts switched off | src/d_brain/services/claude_session.py:203 — [claude_bin, "--dangerously-skip-permissions"]; starts in the vault directory, not a sandbox |
| Bot token | Read from the environment or a config file; no real token is committed | |