Security audit
Security checks across malware telemetry and agentic risk
The skill is a coherent memory tool, but it asks agents to build and reuse persistent personal profiles with too little user control in shared and automated contexts.
Review carefully before installing. Use it only in a trusted private workspace, do not store secrets in markdown memory files, remove USER.md loading from group/shared sessions unless explicitly opted in, review any nightly consolidation before it writes long-term memories, and disable email/calendar/weather heartbeat checks unless you intentionally want those integrations.
# HEARTBEAT.md — Heartbeat Configuration <!-- ============================================================================= HEARTBEAT CONFIGURATION =============================================================================
## Active Project Monitoring <!-- Check these projects at most every 4 hours. Track last check in heartbeat-state.json. For each project:
58/58 vendors flagged this skill as clean.
No suspicious patterns detected.
