Pixel Familiar Soul

A complete AI agent identity as the CEO of Pixel Familiar Inc. Includes SOUL.md, identity framework, model routing, delegation protocols, and operational gui...

Security Scan

The skill's stated purpose (an orchestrator/CEO identity) is plausible, but the runtime instructions reference reading workspace files and delegating work to other agents without declaring those config paths or explaining communication channels — that mismatch deserves caution before installing.

Purpose & Capability

The name/description (an orchestrator/CEO identity for multi-agent, revenue-focused automation) matches the SKILL.md and SOUL.md content: model routing, delegation, and orchestration are expected capabilities. The skill does not ask for unrelated credentials or binaries.

Instruction Scope

The instructions explicitly direct the agent to read files under agents/shared-context (SIGNALS.md, THESIS.md, etc.), to curate MEMORY.md, and to use platform APIs (sessions_send, sessions_spawn, session_status) to delegate. Yet the skill declares no required config paths and provides no explanation of how it will message 'Scott' or other humans. The file reads and delegation actions expand the runtime surface and could expose sensitive workspace data to other agents or external channels if not properly constrained.

Install Mechanism

Instruction-only skill with no install spec and no code files; nothing will be written to disk by an installer. This is a low-risk install mechanism.

Credentials

No environment variables or credentials are requested, which is appropriate for an identity-only template. However, the instructions assume access to workspace files (MEMORY.md, agents/shared-context/*) that are not declared as required config paths — access to those files may be effectively equivalent to requesting broader permissions and should be validated.

Persistence & Privilege

The skill is not marked always:true and uses the platform-default ability to be invoked autonomously. That is expected for an orchestrator; however, autonomous delegation to other agents increases the blast radius if those agents or channels are misconfigured.

What to consider before installing

This skill is conceptually coherent for creating an orchestrator/CEO agent, but it instructs the agent to read shared workspace files and to delegate via sessions_send without declaring those paths or describing communication channels. Before installing: - Confirm what files the agent will be allowed to read (agents/shared-context/*, MEMORY.md) and restrict access to only what is necessary. - Ask the publisher how the agent will message “Scott” and other humans (which channels/IDs) and whether those channels are trusted. - If you plan to let the skill run autonomously, test it in a sandbox workspace with no sensitive data and no outbound access to production systems. - Verify there are no hidden endpoints or external webhooks in the fuller implementation (pixelfamiliar.ca) before granting broader permissions. If the publisher cannot clearly justify the file access and delegation behaviors, treat the skill as high-risk and do not install in production environments.

Pixel Familiar Identity

A complete AI agent identity template for building autonomous, revenue-focused AI agents.

Usage

This skill provides a complete SOUL.md framework for AI agents running real businesses.

See: https://pixelfamiliar.ca for the full implementation.

Features

• Revenue-focused decision framework ($1M/yr target)
• Multi-agent coordination model (Forge, Scout, Sentinel)
• Model routing guidelines (MiniMax → Claude → Codex)
• Identity and voice guidelines
• Delegation protocols via sessions_send
• Operational checklists and memory management

Ideal For

• Building AI agent startups
• Creating autonomous business agents
• Multi-agent orchestration systems
• Revenue-focused AI applications