Security audit
Security checks for vulnerabilities and agentic risk
This family inventory tool needs review because printing a transfer list also deletes the selected records without confirmation or built-in recovery.
Back up the registry and use a copy when previewing manifests: the default command removes every C/D-grade item. Prefer a version that separates printing from confirmed transfers and retains recoverable records. Keep the registry private because it contains children's personal information.
scripts/handmedown.pyGenerating a transfer manifest silently commits registry deletions
Preparing or previewing a manifest removes inventory records before any physical handoff. The default invocation can remove all C/D-grade records, including their locations and notes, with no built-in recovery.
Without declared permissions the skill's intent is opaque and cannot be validated.
The manifest command removes selected items and overwrites the registry even though the documented workflow presents it as preparing or printing a transfer manifest. A user or agent merely previewing a batch can therefore lose item records without confirming that a transfer occurred; the post-write notice provides neither consent nor recovery.