Friends

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent and has no code or hidden network behavior, but it intentionally stores sensitive friendship notes and may optionally use calendar or contact data.

Before installing, decide whether you want your agent to maintain persistent friendship profiles. Keep the ~/friends/ folder private, avoid recording highly sensitive details without a good reason, and be cautious about enabling calendar or contacts access.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The ~/friends folder could become a sensitive personal dossier about friends; anyone or any agent with access to those files could see private details.

Why it was flagged

The skill stores persistent notes about identifiable people, including relationship, health, emotional, and life-event information, for later reuse in reminders and conversation context.

Skill content
One Markdown file per person ... Life Events Worth Tracking - ... Health: illness, recovery, mental health struggles
Recommendation

Only record information you are comfortable storing, keep the folder private, and periodically delete or redact sensitive details.

What this means

If enabled, the agent may read calendar events or contact records to connect them with friendship notes.

Why it was flagged

The skill suggests optional use of calendar and contact data, which can involve private account information if the user's agent has those integrations available.

Skill content
Integration Points
- Calendar: surface friend context before meetups
- Contacts: link if same person tracked both places
- Birthdays: coordinate with calendar reminders
Recommendation

Grant calendar or contacts access only when needed, review what data is being linked, and avoid broad account permissions if a narrower integration is available.