✓
Purpose & Capability
The name/description (friend manager: birthdays, debts, plans) matches the instructions which read and update a local file knowledge/personal/friends.md — the requested capabilities are proportional and expected.
✓
Instruction Scope
SKILL.md explicitly directs the agent to read and update only knowledge/personal/friends.md and use chat history. There are no instructions to access unrelated files, environment variables, or external endpoints.
✓
Install Mechanism
This is instruction-only with no install spec or code files, so nothing is downloaded or written during install — low installation risk.
✓
Credentials
The skill declares no environment variables, credentials, or config paths. It does persist user data locally, which is appropriate for its purpose.
ℹ
Persistence & Privilege
The skill will write persistent personal data to knowledge/personal/friends.md in the agent workspace. This is expected for a memory-like assistant, but users should be aware the data is stored locally and accessible to anything with access to the workspace.
Assessment
This skill stores and updates personal friend information in the agent workspace file knowledge/personal/friends.md. It does not request credentials or communicate externally, so the main risk is local privacy: ensure the workspace is secure and that you trust the agent and host. Before installing, inspect the README and SKILL.md (you already did), and after enabling, review the contents of knowledge/personal/friends.md. If you want stronger protection, avoid putting sensitive identifiers in the file (use nicknames or partial data), back up or encrypt the file, and consider disabling autonomous invocation if you don't want the agent to update memory without your explicit prompt. The skill's source/homepage are not provided — while this is acceptable for an instruction-only skill, prefer skills from known sources if you have stricter trust requirements.
