✓
Purpose & Capability
Name/description (psychological counselor with persistent memory) align with the runtime instructions and file layout. All required behavior (profile, maps, sessions, safety checks) is consistent with a counseling tool and does not request unrelated capabilities or credentials.
ℹ
Instruction Scope
SKILL.md instructs the agent to read and write a structured set of Markdown files under ~/.counselor (core/, maps/, sessions/, etc.). This is expected for a persistent-memory counselor, but it is sensitive: the skill will create and store potentially very personal session data on the user's home directory in plaintext unless the user takes extra steps (encryption, permissions).
✓
Install Mechanism
The published package in this registry is instruction-only (no install spec, no binaries). The README suggests typical install methods (npx, git clone, plugin marketplace). Those are normal but note that using npx/git clone will download and execute remote code from GitHub/npm — standard but requires trusting the source.
✓
Credentials
The skill requires no environment variables, binaries, or external credentials. No disproportionate access requested.
ℹ
Persistence & Privilege
The skill is designed to persist data locally (~/.counselor/) and to update files across sessions. always:false (not force-included). Persisting user-sensitive notes is coherent with the purpose but raises privacy considerations (local storage, write permissions, long-lived files).
Scan Findings in Context
[no-regex-findings] expected: The registry package contains no executable code for the scanner to analyze (instruction-only). This is expected for an instruction-only skill whose behavior is implemented by the host agent following SKILL.md.
Assessment
This skill appears to do what it says: it creates and maintains a local counseling workspace at ~/.counselor and reads/writes many Markdown files (PROFILE.md, STATE.md, SAFETY.md, sessions, maps, etc.). Before installing or using it: (1) Be aware that highly sensitive personal information will be stored on your machine in that directory in plaintext by default — consider encrypting the directory, limiting filesystem permissions, or using OS-level encryption/backups. (2) The README suggests installing via npx or git clone; those commands download and run remote code — only install from sources you trust. (3) The skill explicitly warns it is not a licensed therapist; for crisis or severe symptoms follow the emergency contacts listed. (4) If you want stronger privacy, ask whether the agent supports encrypting the files, requiring a local passphrase, or storing the data elsewhere you control. If you are comfortable with local file storage and trust the source, the skill is internally coherent and appropriate for the stated purpose.
