Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local call-notes helper that discloses sensitive local storage, but users should be deliberate about when it captures conversation details.
Install only if you want a local memory system for calls and follow-ups. Because call notes can include sensitive business or personal details, use it intentionally, avoid capturing conversations casually, and periodically review or delete records under the local memory/calls storage.
The skill advertises local file-backed storage and references reading from prior call history, but it does not declare any explicit tool scope such as permissions or allowed-tools. That mismatch can lead to overbroad implicit file access at runtime and makes it harder to enforce least privilege for sensitive call records.
The invocation description is very broad, covering ordinary mentions of phone calls, meetings, conversations, commitments, or follow-ups. This can cause the skill to activate on routine user dialogue and unnecessarily collect, store, or infer sensitive interpersonal and business information in local memory without sufficiently clear user intent.
No suspicious patterns detected.
