Personal Love

• Outcome: Pass
• Latest audit: May 27, 2026 at 10:23 PM UTC
• Version:
  1.0.0

Overview

This is a relationship-memory assistant that openly stores personal relationship notes locally, with privacy caveats but no evidence of hidden or malicious behavior.

Install only if you want the agent to remember relationship details over time. Treat knowledge/personal/love.md as sensitive: review it periodically, delete entries you do not want retained, and avoid sharing details you would not want stored in the agent workspace.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The README explicitly states that sensitive relationship information will be stored in a workspace file, but it does not warn users about persistence, local exposure, backup/sync risks, or who can access that workspace. Because this skill is designed to collect intimate personal data such as relationship status, anniversaries, birthdays, and partner details, silent storage materially increases privacy risk if the workspace is shared, compromised, or inspected by other tools.

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The trigger conditions are broad enough to activate on many ordinary conversations containing words like 'love', 'date', 'partner', or 'marriage', which can cause the skill to run unexpectedly. In this skill, unintended activation is more dangerous because it is coupled to reading and updating a persistent memory file containing highly sensitive relationship data, increasing privacy and data-handling risk.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: The skill explicitly instructs the agent to persist new relationship details to `knowledge/personal/love.md` whenever the user reveals new information, but it does not require informed consent, notice that data will be stored, or a chance to opt out. Because this domain involves intimate personal data such as partner identity, anniversaries, emotional history, and conflicts, silent persistence creates a significant privacy and retention risk if the skill is triggered unintentionally or the user does not expect long-term storage.

VirusTotal

66/66 vendors flagged this skill as clean.