Social Coach
PassAudited by ClawScan on May 7, 2026.
Overview
This instruction-only dating coach is coherent and has no code or network behavior, but it keeps sensitive relationship and mood logs in local persistent files.
This skill appears benign and purpose-aligned, but treat it like a private journal: use pseudonyms, avoid storing real names or screenshots with identifying details, choose a private SOCIAL_COACH_DATA location if needed, and review the full installed skill/data files because the provided SKILL.md excerpt is truncated.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Dating attempts, conversation summaries, rejection history, and emotional self-scores may remain on disk and be reused in future coaching.
The skill persists a user profile and social/dating history for later personalization, which is aligned with its stated purpose but may contain sensitive personal and third-party information.
`profile.json` | 用户画像 ... `invitations.jsonl` | 邀约记录 ... `conversations.jsonl` | 深度会话/模拟记录
Use aliases instead of real names, avoid recording unnecessary private details, and periodically review or delete the local data files.
Using record-related commands can create or append local files containing the user’s social coaching data.
The skill instructs the agent to directly mutate local files for persistence. This is scoped and purpose-aligned, but users should know the agent is expected to write records rather than only give advice.
记录指令触发时,自动 append 到对应 JSONL ... 绝不让用户复制粘贴 JSON——所有持久化必须由模型直接执行
Allow only the expected data-directory operations, and ask the agent to show the record before saving if you want explicit confirmation every time.
A user might skip important information about where data is stored and how the agent saves it.
This wording may discourage users from reading the later operational details, including data storage and file-writing behavior. The details are still present in the artifact, so this is only a transparency note.
人类用户读到这里就够了,剩下的交给模型。
Read the storage and file-operation sections before installing or using the skill.
