manifesto-hci

This skill appears to do what it says: it creates a per-project directory (projects/prj_<project_id>/), writes a Manifesto markdown file, logs every user and assistant turn to a JSONL file, and performs git init/add/commit. Before installing or using it, be aware that: (1) all conversation content and manifesto data will be stored on disk and recorded in git history (un-encrypted) — do not use with secrets or sensitive data unless you isolate or encrypt the project directory; (2) the SKILL.md describes an asynchronous 'Diff Sub-Agent' and socket push messages for audit results, but the provided script does not implement that background service — some auditing behavior is purely a protocol expectation the agent must follow; (3) the script invokes local git via subprocess and writes files relative to the agent's working directory, so confirm the agent has permission to write there and that created files won't inadvertently include other sensitive files; (4) no network endpoints or credentials are requested, and there are no external downloads. If you accept local persistent logging and git commits, the skill is consistent with its stated purpose. If you need guarantees about encryption, remote hosting, or removal of logs, request those features or review/modify the script before use.