Lena Learning

This skill is coherent with 'learn from conversations' but has two practical risks: 1) It will write persistent memory files containing conversation excerpts and preferences — those can contain sensitive or private data unless you know exactly where they are stored and who can read them. 2) It explicitly instructs updating AGENTS.md / TOOLS.md (other agent/skill config), which could change other skills' behavior without clear consent. Before installing, consider: - Ask the publisher (or inspect runtime) for the exact file paths used (where memory/ and AGENTS.md will be written). Decline install unless those paths are confined to a directory you control. - Require an opt-in or manual review step before any write that modifies AGENTS.md/TOOLS.md. - Limit file permissions so only the agent identity can write, and rotate backups of existing AGENTS.md/TOOLS.md. - If you handle sensitive data, avoid enabling automatic 'save after every session' and daily heartbeats until you confirm data retention/retention policy. - If possible, run this skill in a sandbox or with a test account first. Confidence is medium because the skill is instruction-only (no executable code) so we can read its intended behavior, but we lack runtime implementation details (exact file locations, who can read/write them, and whether the platform enforces scopes). Knowing the concrete file paths and whether the platform prevents cross-skill file edits would raise confidence and could move the verdict to benign or confirm malicious behavior.