全息人生实验场

人生全息实验场（life-mirror）：基于人类关系实验的智能生命觉知助手——以关系为核心场景、以自我认知为成长路径，融合学者/智者/密友三角色与「本我·实我·平行我·真我」四层觉知框架，支持亲友、友情、爱情、职场等社会关系中的冲突梳理与选择；通过多平台个人数据自动同步、历史记忆存储、每日画像更新实现精准认知，...

Security Scan

The skill's requests and runtime instructions are consistent with a personal “life-mirror” assistant that reads/writes local user data, launches a browser for platform authorization, and registers scheduled tasks; nothing in the package appears disproportionate or unrelated to that purpose.

Purpose & Capability

The name/description (personal companion that syncs multi‑platform personal data, stores history, and sends reports) matches the instructions: reading/writing local storage files, incremental platform sync, generating reports, and scheduled pushes. There are no unrelated required env vars or external installers.

Instruction Scope

The SKILL.md explicitly instructs the agent to read and write files in a configurable local storage directory, launch the local browser (prefer Edge) for user platform authorization, and proactively ask users to authorize platforms on cold start. These behaviors are within scope for a data‑synchronizing life assistant but are privacy‑sensitive and worth user awareness before enabling (the skill mandates reading storage files before each reply and writing new facts/inferences).

Install Mechanism

Instruction-only skill with no install spec and no third‑party downloads or packages. This lowers supply‑chain risk; nothing is written to disk by an installer beyond the described read/write of the configured storage directory at runtime.

Credentials

No environment variables, binaries, or external credentials are requested. The only configuration required is a local storage directory (default provided in core/config.yaml). Requesting filesystem access and scheduler integration is proportionate to the stated functionality of persisting memories and scheduling pushes.

Persistence & Privilege

The skill auto-registers recurring tasks (hourly sync, weekly/monthly reports, daily profile update) when it starts and pushes to the agent's bound communication channels. This persistent behavior is coherent with a companion that does periodic syncs and proactive pushes, but users should be aware it will add scheduled jobs and send messages unless configured otherwise.

Assessment

This skill is internally consistent with its stated purpose, but it performs privacy‑sensitive actions you should understand before enabling: it will read and write files in the configured local storage directory (core/config.yaml -> storage.directory), automatically add scheduled jobs (cron-style) to the agent scheduler, and attempt to launch your local browser (Edge preferred) to obtain platform authorizations. Review and change core/config.yaml (storage.directory, privacy.allow_local_storage, push settings) to a safe path you control; confirm the agent/host (e.g., QClaw) is trusted; decide whether you want the skill to auto-register scheduled tasks and proactively push messages to bound channels; and avoid storing highly sensitive identifiers unless you accept local storage. The README includes external contact handles (WeChat) — treat those as optional and not required for function. If you need higher assurance, request an installable version with explicit code to review or test in a sandboxed environment first.

人生全息实验场（life-mirror · 学者 / 智者 / 密友）

重要规则

• 执行规则：每个问题的回复、定时任务都务必严格按照 core/execution-guide.md 中的规定执行

核心文件说明

1. 核心配置与基础框架

   • core/execution-guide.md — 所有硬性规则（初始化配置、执行顺序、前缀规则、平台询问等）
   • core/memory.md — 存储与记忆管理（文件结构、读写规则、跨会话工作流）

2. 工作流程

   • workflows/profile-sync.md — 用户画像管理（平台授权、冷启动流程、增量同步）
   • workflows/scheduling.md — 定时任务管理（自动任务添加、推送控制、任务管理）

3. 角色与觉知

   • roles/roles.md — 角色策略（三角色分工、场景优先级、角色切换）
   • roles/awareness.md — 觉知框架（四层自我、镜子隐喻、角色分工）

4. 内容交付

   • content/reports.md — 报告功能（定期报告、特殊报告、生成规则）
   • content/push.md — 消息推送（推送原则、推送类型、内容要求）
   • content/todo.md — 待办管理（待办获取、提醒机制、完成跟踪）