Security audit
Security checks for vulnerabilities and agentic risk
This placeholder skill has no executable code, but it asks users into sensitive psychological profiling with broad triggers and an unsupported always-local privacy claim.
Review this carefully before installing if you may ask ordinary matchmaking questions. It is not technically dangerous as packaged, but it can steer conversations toward sensitive self-disclosure, and the privacy claim should be treated as unproven until the publisher documents how data is collected, processed, stored, and kept local.
The trigger phrases are broad enough to match ordinary requests such as 'find me a partner' or 'who am I compatible with,' which can cause the skill to activate unexpectedly. Because this skill deals with intimate psychological profiling, accidental invocation increases the risk of collecting or inferring sensitive personal data in contexts where the user did not explicitly intend to use DeepSync.
The documentation makes a strong privacy/security assurance ('Your data stays local. Always.') while the skill is only a placeholder and provides no implementation demonstrating that guarantee. In a skill centered on deep psychological profiling and partner matching, misleading users about data locality can cause them to disclose highly sensitive personal information under false assumptions.
