Security audit
Security checks for vulnerabilities and agentic risk
This is a local Tinder coaching skill with optional, user-approved notes; it has a privacy disclosure inconsistency but no evidence of external data transfer, hidden execution, or credential use.
Before installing, understand that this skill may keep optional dating-coaching notes under ~/tinder/. Only approve storage if you are comfortable retaining summaries of goals, match stages, profile observations, experiments, and date-planning patterns on your machine; do not provide passwords, account access, or raw private archives.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
## Signals Over Message Count
Do not judge momentum by how many messages were exchanged.
Judge it by reciprocity, specificity, and whether trust and logistics are getting easier.
The skill handles highly sensitive dating data and explicitly says to explain storage only if the user asks or if trust depends on it, while also describing persistence under ~/tinder/. That creates a real privacy vulnerability because users may disclose chats, goals, and date outcomes without informed awareness that this information may be stored locally.
The instruction to keep storage behavior undisclosed by default unless the user asks is itself a harmful design choice. In a dating-coaching context, users may share intimate messages, romantic preferences, and date history; withholding storage disclosure undermines informed consent and increases the risk of privacy harm or unexpected retention of sensitive personal data.
No suspicious patterns detected.