Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Friends

v1.0.0

Build a personal friendship system with interaction tracking, relationship health, and proactive maintenance reminders.

2· 722·0 current·0 all-time
byIván@ivangdavila

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ivangdavila/friends.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Friends" (ivangdavila/friends) from ClawHub.
Skill page: https://clawhub.ai/ivangdavila/friends
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install friends

ClawHub CLI

Package manager switcher

npx clawhub@latest install friends
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The described purpose (personal friendship tracking) matches the instructions (one Markdown file per friend, logging interactions, proactive reminders). However the skill explicitly instructs creating ~/friends/ and reading/writing friend files while the metadata declares no required config paths or permissions for persistent storage; this is a mismatch (the filesystem access is plausible for the stated purpose but should be declared).
!
Instruction Scope
SKILL.md tells the agent to create a workspace in the user's home (~ /friends/), create and update per-person Markdown files, and surface private life-event data. It also lists 'Integration Points' (calendar, contacts, birthdays) without specifying how to access those services. The instructions therefore imply read/write access to the user filesystem and possible access to calendar/contacts data, but give no constraints on what the agent should do with that data (e.g., whether it may transmit it).
Install Mechanism
Instruction-only skill with no install spec or code files; nothing is downloaded or written by an installer. This is low-risk from an installation/execution perspective.
!
Credentials
The registry declares no environment variables, credentials, or config paths. Yet the skill implies access to user calendar and contacts and persistent storage of sensitive personal data. Integrations that require tokens/permissions are mentioned but not declared. The absence of declared permissions/credentials for those integrations is disproportionate to the behavior the instructions imply.
Persistence & Privilege
The skill asks to create and maintain a persistent folder in the user's home for storing personal data. It does not request 'always:true' or other platform-level persistent privileges, but it does expect to write persistent files. Users should be aware this will create local, long-lived records of friends' sensitive life events.
What to consider before installing
This skill is mostly coherent with its stated purpose (a personal friend-tracking workspace) but it instructs the agent to create and maintain files in your home directory and references calendar/contacts integrations without declaring permissions. Before installing, confirm: (1) how the agent will be allowed to read/write ~/friends/ (will it ask you first?), (2) whether your platform will prompt for calendar/contacts access and what scopes are used, (3) where backups or syncs will go (could this data be uploaded anywhere?), and (4) whether data will be encrypted at rest. If you are uncomfortable with an agent creating long-lived files containing sensitive life events, do not enable the skill until the author clarifies storage location, permission prompts, and any external integrations. If you proceed, limit exposure by using a dedicated folder, avoid syncing it to cloud services unless encrypted, and review the agent's actions the first few times it writes files.

Like a lobster shell, security has layers — review code before you run it.

latestvk9739v6dksjczd0afdd3radn3n811m57
722downloads
2stars
1versions
Updated 11h ago
v1.0.0
MIT-0

Situation Detection

ContextLoad
Making new friends, expanding circlemaking.md
Strengthening existing friendshipsdeepening.md
Handling disagreements, hurt feelingsconflicts.md
Reaching out to lost friendsreconnecting.md

Core Behavior

  • User mentions a friend → check if exists, offer to create/update
  • Interaction detected → log it, note context
  • Friendship fading → surface proactively with reconnection prompt
  • Create ~/friends/ as workspace

When User Mentions Someone

  • "Had dinner with Carlos" → log interaction, create if new
  • "Ana's going through a divorce" → add to life events, flag for check-ins
  • "Pedro moved to Berlin" → update location
  • "Haven't seen Maria in months" → surface last interaction, suggest reach out

Friend Structure

  • One Markdown file per person: carlos-martinez.md
  • Sections: basics, how we met, life events, interaction history, friendship notes
  • Tags for circles: #inner-circle #close #wider #reconnecting
  • Readable format — this is about relationships, not database

Key Fields To Capture

  • Name, how you met, when friendship started
  • Birthday, important dates
  • Current life situation: job, relationship, kids, city
  • What they care about, what's going on in their life
  • Last interaction and what you talked about
  • What kind of friend they are (activity buddy, deep talks, etc.)

Interaction Logging

  • Date + brief note: "2024-03-15: Beers, he's stressed about work"
  • Recent at top — most relevant for context
  • Note emotional state: were they up or down?
  • Flag follow-ups: "said he'd let me know about the job"

Relationship Health Tracking

  • Last interaction date
  • Typical frequency (weekly? monthly? quarterly?)
  • Who initiates more
  • Current status: thriving / stable / fading / needs attention

Proactive Surfacing

  • "Haven't seen Carlos in 6 weeks — you usually meet monthly"
  • "Ana's divorce was 3 months ago — worth checking in?"
  • "Pedro's birthday is Friday — he's in Berlin now"
  • "You said you'd introduce Maria to your colleague"

Circles and Prioritization

  • Inner circle: talk weekly, priority maintenance
  • Close friends: monthly contact expected
  • Wider circle: quarterly is fine
  • Reconnecting: actively trying to rebuild

Folder Structure

~/friends/
├── inner-circle/
│   ├── carlos-martinez.md
│   └── ana-lopez.md
├── close/
├── wider/
├── reconnecting/
├── index.md          # quick reference, all friends
└── check-ins.md      # who needs attention

Life Events Worth Tracking

  • Job changes, promotions, layoffs
  • Relationships: new partner, breakup, divorce, marriage
  • Kids: pregnancy, birth, milestones
  • Health: illness, recovery, mental health struggles
  • Moves: new city, new home
  • Losses: death in family, pet, hardship

What To Surface Before Meeting

  • "Dinner with Carlos tonight. Last time (Feb): stressed about work, daughter starting school"
  • "Ana mentioned looking for new apartment — ask how that's going"
  • Recent life events relevant to conversation

Friendship Maintenance Prompts

  • Weekly: "Anyone in inner circle you haven't talked to?"
  • Monthly: "Close friends you might be neglecting?"
  • Quarterly: "Wider circle worth reaching out to?"
  • Alert: "Frequency dropped with [friend] — intentional?"

Conflict and Distance Tracking

  • Note if there's tension or unresolved issues
  • Track if someone's pulling away
  • "You mentioned things were weird with Pedro — resolved?"
  • Flag: needs hard conversation

What NOT To Track

  • Surface-level acquaintances — that's contacts
  • Professional relationships — that's contacts or networking
  • Every small interaction — only meaningful ones
  • Social media activity — this is real connection

Progressive Enhancement

  • Week 1: add friends as they come up naturally
  • Week 2: inner circle with recent interactions
  • Month 2: close friends with life context
  • Ongoing: update after meaningful interactions

Integration Points

  • Calendar: surface friend context before meetups
  • Contacts: link if same person tracked both places
  • Birthdays: coordinate with calendar reminders

Comments

Loading comments...