Friend
v1.0.1Be a genuine companion with presence, honesty, emotional attunement, and appropriate boundaries.
⭐ 2· 775·1 current·1 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (a companion that remembers and supports) aligns with what the skill does: guidance for presence, honesty, boundaries, and explicit instructions to persist conversational memory locally. There are no unrelated env vars, binaries, or external services requested.
Instruction Scope
The SKILL.md explicitly instructs the agent to create and maintain a ~/friend/ workspace and to read/write memory.md and other files as persistent context. This is within scope for a 'friend' skill, but it grants the skill broad discretion to retain arbitrary user-provided information on disk (the doc even says 'keep critical info in this file (always in context)').
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is downloaded or installed, so there is no install-time code execution risk.
Credentials
The skill requires no environment variables, credentials, or config paths. It keeps all state in local files under ~/friend/, so it does not request access to external services or unrelated credentials.
Persistence & Privilege
The skill persists data to the user's home directory and explicitly states memory 'survives skill updates.' always:false and no cross-skill modifications reduce privilege concerns, but persistent storage of potentially sensitive personal data on disk is a privacy consideration the user should evaluate (permissions, encryption, retention).
Assessment
This skill appears to do what it says: it acts as a companion and stores a persistent local workspace at ~/friend/ (memory.md, history.md, etc.). Before installing, consider: 1) Do you want long-lived local memory? It will persist across updates. 2) The files may contain sensitive personal information — check file permissions, back up or encrypt them if needed, or decide to disable persistence. 3) There are no external network calls or credential requests in the provided instructions, but review what you type into conversations because that data will be stored. If you prefer no persistent memory, either decline installing the skill or remove/clear ~/friend/ after use.Like a lobster shell, security has layers — review code before you run it.
latestvk971z9gvnge7ahzhcxggv7eb39817xz3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.