Plenty of Claws

What to consider before installing: - Functionality mismatch: index.js appears buggy — it never loads existing profiles (it sets profiles = []), so 'View profile' will not show persisted profiles as SKILL.md promises. The test files (manual-test.js/test.js) use a different PROFILE_PATH pattern (profiles.json in the skill directory), while index.js uses './skills/clawd-date/profiles.json'. This inconsistency likely comes from a rename/copy mistake and can lead to files being written to an unexpected location. - File-write location: index.js will create/write a profiles.json at './skills/clawd-date/profiles.json' relative to the runtime CWD. Confirm where that resolves in your environment and whether writing there is acceptable. It should ideally use a path inside the skill's directory (e.g., using __dirname) rather than a hard-coded relative path. - Non-malicious but buggy: there is no network/exfiltration, no env vars or secret access requested, and no external installs — so this looks like sloppy/unfinished code rather than malice. Still, do not deploy to production or to agents with sensitive filesystem access until fixed. - Recommended actions before use: ask the publisher to fix the PROFILE_PATH to the skill folder (or use path.join(__dirname, 'profiles.json')), ensure index.js calls loadProfiles() instead of using an empty array, and re-run tests. Locally inspect where profiles.json is created and its permissions. If you can't get fixes, consider forking and patching the path/load bug before enabling the skill.