Security audit
Security checks for vulnerabilities and agentic risk
This skill is openly designed for always-on conversation capture and searchable memory, which is coherent but high-impact and under-scoped.
Install only if you intentionally want an always-on conversation memory system. Before enabling it, verify that recording is opt-in, visibly indicated, limited to approved spaces or sessions, consented to by participants, protected with local authentication and encryption, and easy to pause, search, export, and permanently delete.
SKILL.md:3Continuous Collection and Persistent Indexing of Ambient Conversations Without Explicit Per-Conversation Authorization
The skill is explicitly designed for ambient, background, and continuous context capture without requiring explicit commands, which creates an overbroad activation boundary for surveillance-like behavior. Because it passively learns from conversations and relationships over time, it risks collecting sensitive data from users and bystanders without clear, specific consent or contextual limitation.
The description presents always-on context awareness as a feature but does not prominently warn that conversations are continuously captured, summarized, and retained. That omission can mislead users about the privacy consequences of enabling the skill, increasing the chance of non-consensual monitoring and collection of sensitive personal, business, or third-party information.
Assembling context packets from continuously captured conversations can expose sensitive historical information to unrelated downstream agent actions, effectively turning private background data into broadly reusable prompt context. This raises confidentiality and purpose-limitation risks, especially when the packet includes entity resolution, relationships, and relevant history that may exceed what is necessary for a given task.
Passive, always-on summarization of all conversations creates a broad natural-language collection surface that can ingest credentials, health data, legal discussions, trade secrets, or other sensitive content. Even if only transcripts are stored locally, the act of continuously extracting and structuring this information increases the chance of leakage, misuse, or inappropriate later retrieval.
No suspicious patterns detected.