Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Portuguese persistent-memory skill with no executable payload, but users should understand it is meant to keep selected memories across sessions.
Install only if you want an agent to keep selected memories across sessions. Do not save passwords, tokens, private documents, or sensitive personal details unless you have a clear way to inspect and delete the stored memory files.
The description explicitly says 'Tudo em português,' which indicates the skill is intended to operate only in Portuguese. The file does not offer a user opt-in or language choice, and it does not clearly justify a strict locale limitation beyond targeting the Brazilian community. This creates a natural-language locale policy concern.
The skill explicitly promotes persistent storage of user-related memories across sessions, including preferences and knowledge, but provides no privacy notice, consent mechanism, retention policy, or guidance on handling sensitive data. This creates a real risk of collecting and retaining personal or sensitive information longer than users expect, which can lead to privacy harm, unauthorized profiling, or noncompliance with data protection requirements.
The manifest text says the skill is 'essencial para desenvolvedores brasileiros' and includes locale-specific tags like 'portugues' and 'brasil'. This natural-language framing suggests a language/locale restriction or preference, but the file does not explicitly present it as an opt-in choice or document a required region-specific compliance reason.
No suspicious patterns detected.
