Security audit
Security checks for vulnerabilities and agentic risk
This is a local, instruction-only beauty guidance skill with disclosed opt-in memory and no external data sharing.
Before installing, know that the skill may save beauty preferences and routine context locally under ~/beauty only if you approve it. Avoid saving medical diagnoses or sensitive identifiers, and review or delete ~/beauty/memory.md if you no longer want that context retained.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
mkdir -p ~/beauty/{routines,products,notes}
touch ~/beauty/memory.md
chmod 700 ~/beauty
chmod 600 ~/beauty/memory.md
memory.md is empty, initialize from memory-template.md.Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
mkdir -p ~/beauty/{routines,products,notes} touch ~/beauty/memory.md chmod 700 ~/beauty chmod 600 ~/beauty/memory.md
2. If approved and `memory.md` is empty, initialize from `memory-template.md`.
3. Continue with the user request immediately after setup.
The skill instructs storing durable personal context such as skin/scalp profile, sensitivities, budget, and typical routines in local memory, but it does not require a clear user-facing privacy notice or explicit consent for ongoing persistence of that data. While the storage is local and later file permissions are restrictive, this still creates privacy risk because users may not realize health-adjacent and lifestyle information is being retained across sessions.
The file gives generalized skincare routines, including exfoliation and recovery guidance, without a clear warning to patch test new products and discontinue use if irritation increases. In a beauty skill, users may follow these steps directly, so omission of basic safety guidance can contribute to worsening irritation or inappropriate continued product use.
No suspicious patterns detected.