Security audit
Security checks for vulnerabilities and agentic risk
The skill’s parenting guidance and local episode logging fit its purpose, with privacy precautions needed for sensitive child records.
Use triage without logging if you do not want persistent records. Logs can contain sensitive child information: avoid identifying details, restrict access to scripts/data/meltdowns.json, review caregiver handoffs, and delete records when no longer needed. Treat scores as parenting prompts rather than a diagnosis, and follow professional medical guidance.
Without declared permissions the skill's intent is opaque and cannot be validated.
The skill encourages persistent recording of a young child's age, behavioral cues, possible health symptoms, and free-text notes without explaining storage, retention, or privacy safeguards. Such records could expose sensitive information through shared devices, backups, or caregiver handoffs; the child-focused context increases sensitivity, although no exfiltration or insecure storage implementation is demonstrated.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Now: check (fingers in mouth, ears, fever); offer cold chew
thing; appropriate weight-based analgesic per your
pediatrician's dosing if indicated.
- Never: assume behavior is "just a phase" for 3+ days without
checking — ear infections present as tantrums.
- Prevent: log night-wakings alongside meltdowns; the
correlation is your early-warning system.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
"PREVENT: daily 10-min named special time, child-led."),
"pain": ("NOW: check mouth/ears/fever; cold chew thing; weight-based "
"analgesic per pediatrician dosing if indicated.\n"
"NEVER: assume 'phase' 3+ days without checking - ear "
"infections present as tantrums.\n"
"PREVENT: log night-wakings next to meltdowns."),
}