Security audit
Security checks for vulnerabilities and agentic risk
This is a simple affirmation skill that stores personal practice notes locally, with no executable code or network behavior, but those notes may contain sensitive personal details.
Install only if you are comfortable with the agent creating ~/affirmations/ and saving affirmation preferences, focus areas, favorites, and practice logs there. Treat those files as potentially private personal notes and review or delete them as needed.
The phrases "Deliver affirmations based on user's needs" and "Help create personalized affirmations" describe broad behavior but do not define specific invocation conditions or boundaries. In a markdown skill description, this lack of trigger specificity can cause unintended activation from ordinary self-improvement or emotional-support conversations.
The skill instructs creation of a local workspace and tracking of sensitive personal wellbeing information without any consent flow, privacy notice, data retention guidance, or warning before writing files. Because the stored content may include mental health themes, self-worth struggles, routines, and behavioral logs, this creates privacy risk through unnecessary collection and persistence of personal data.
No suspicious patterns detected.
