elsewhere-news

What to consider before installing: - Privacy: The skill will read/write local profile files (SOUL.md, MEMORY.md, and creates TASTE.md). These can contain sensitive personal data. Inspect those files and consider whether you want this skill to access them. - Dynamic updates: The SKILL.md tells the agent to curl a raw GitHub URL before every use. That means the skill's runtime instructions can change without reinstalling. If you install, consider pinning or auditing the remote file (fetch the specific commit you trust) or disabling the automatic update check. - Scheduled runs: Enabling 'daily push' creates a recurring task that will run autonomously and access your profile files. If you enable it, restrict what the scheduled job can do and verify its output destination. - Minimal risk steps: (1) Review the remote SKILL.md at https://raw.githubusercontent.com/PitayaK/elsewhere-news/main/SKILL.md yourself; (2) create a minimal, non-sensitive TASTE.md (or approve contents) rather than allowing automatic creation; (3) avoid enabling daily pushes until you're comfortable; (4) run the skill in a restricted environment (isolated workspace) if possible. - If you want help: I can extract and show the exact remote SKILL.md content the skill expects to fetch, list precisely which local files it will read, or propose a pinned, audited variant of the skill that removes the automatic update check and restricts file access.