Contacts

PassAudited by ClawScan on May 1, 2026.

Overview

This skill creates a local personal contacts notebook with sensitive relationship details, but the behavior is disclosed, purpose-aligned, and privacy-aware.

Install only if you are comfortable keeping personal relationship notes in a local ~/contacts/ folder. Treat the folder as private, avoid unnecessary sensitive details, and be careful with cloud sync, backups, and Git history.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Contact files may contain sensitive information about you and other people, and those notes could be reused in future interactions.

Why it was flagged

The skill stores persistent personal context about people, including relationship history and notes, for later retrieval and reminders.

Skill content
One Markdown file per person: `maria-garcia.md` ... Sections: basics, personal details, interaction history, notes
Recommendation

Keep the contacts folder private, avoid recording highly sensitive details unless necessary, and consider encryption or excluding it from cloud sync or Git history.

What this means

If the folder is synced, shared, or committed to version control, private relationship details could be exposed.

Why it was flagged

The artifact explicitly acknowledges that the stored contact data is sensitive and provides privacy guidance.

Skill content
Privacy Considerations
- This is sensitive data — keep local, encrypt if needed
- Cloud sync optional but consider privacy
- Git history shows evolution — consider if appropriate
- Some notes are for you only — don't share contact file
Recommendation

Review where ~/contacts/ is stored, do not share contact files casually, and avoid committing them to public or shared repositories.