digestSAFE
Digest your day to day work without acidity.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Digest your day-to-day work without acidity. A terminal dashboard for macOS that keeps your notes, pull requests, reviews and git activity in one place, with reminders and weekly brag summaries.
Install
Homebrew:
brew tap achandrapaul/tap brew install digest
If Homebrew's nss is installed it already provides a digest command, so link this one over it:
brew link --overwrite digest
Go:
go install github.com/achandrapaul/digest/cmd/digest@latest
Prebuilt macOS binaries for Apple Silicon and Intel are on the releases page.
From source, with mise:
mise run build
Setup
After installing, run these three commands once.
- Install what digest depends on:
digest install
This installs any missing tools with Homebrew, the launchd agent that sends reminders, and a keyboard shortcut that opens digest. It asks before each one.
- Check that digest can run everything:
digest doctor
This lists every tool digest uses, whether it was found and which feature needs it. It exits with an error if a required tool is missing; run digest install again to add it.
- Configure digest:
digest setup
This walks through git roots, work days, summaries, hints and notifications. You can also open it from the dashboard with ,, and the first run of digest starts it on its own.
Usage
digest # open the dashboard digest --help # every command and flag (also -h or digest help)
Inside the dashboard, , opens settings and the footer lists the keys for the current screen.
Migrate
Quit the dashboard and run this after every version update to keep your notes safe:
digest migrate
digest migrate --dry-run changes nothing and prints what it would do.
Notes are named after their id and status: .md while active, `-.done.
4c9bcb5059a7OBSERVED · 2026-10-10Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned | |
| cursor | mentioned |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
.version
for _, noteID := range []string{"../keep", "..", "", "a/../../keep"} {Gates applied: no_behavioural_pass.
4c9bcb5059a7full audit observations/trust-audit/skill/achandrapaul__digest.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 4c9bcb5059a7 | SAFE | B | 89 | first audit |
Questions
What does the digest skill do?
Digest your day to day work without acidity.
Is digest safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can digest access on my machine?
The audit observed that it reads or writes files. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does digest work with?
Its documentation mentions claude-code and cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4c9bcb5059a7), read on 2026-10-10. The repository is watched, and a new audit runs when it changes — this is the first audit.