Codegirl Skill

This skill appears to do what it says (create a local persona from exported chats, photos, and GitHub data), but several implementation mismatches and privacy concerns mean you should be cautious before running it. Specifically: - Do not run the included scripts on sensitive third-party data without consent. Photo EXIF extraction can reveal GPS coordinates and timestamps; chat logs contain private messages. Consider stripping EXIF and redacting PII first. - The SKILL.md examples reference ${CLAUDE_SKILL_DIR} and CLI flags; confirm the platform provides CLAUDE_SKILL_DIR and that any invoked script supports the flags used. The telegram_parser file in the package lacks a CLI wrapper — calling it as shown will fail unless you add a small CLI or wrapper. - The wechat parser's auto-detection may claim formats that the script does not fully support; test with small sample files and inspect outputs before trusting automated merges. - Generated files may be written to different default directories (SKILL.md expects ./gfs/, but skill_writer/version_manager default to ./exes/). Search your workspace after a run so you know where data is stored and can delete it if needed. - Review the code before executing in your agent environment. The package does not make external network calls, but it will execute Python scripts (Bash + python3). Run them in a sandbox or with non-privileged user permissions first. If you plan to use this skill: (1) audit and, if desired, fix the CLI/format mismatches (add a CLI entrypoint to telegram_parser or update SKILL.md calls); (2) sanitize inputs (strip GPS and PII); (3) run a test with dummy data to confirm file locations and behavior; (4) avoid creating personas of real people without consent, since the persona can mimic identifiable individuals even if data is stored locally.