A shared emotional memo for relationships — records emotional moments and gently reminds before old wounds are touched
Security Analysis
medium confidenceThe skill's actions (storing and surfacing relationship notes in a local JSON file) match its description and requirements, but it lacks privacy/secure-storage guidance for very sensitive data.
Name and description describe recording and reminding about emotional moments; the SKILL.md only requires creating and reading a local data/memo.json and performing matching/translation workflows — these are coherent with the stated purpose.
All runtime instructions are focused on capturing, summarizing, matching, and translating emotional entries and explicitly use only the local data/memo.json. No network endpoints, unrelated system paths, or extra environment variables are referenced. However, the instructions store highly sensitive personal content to an unencrypted JSON file and provide no guidance on access control, encryption, consent management, retention, or deletion — a privacy gap that should be addressed before use.
Instruction-only skill with no install spec and no code files. Lowest-risk install posture — nothing is downloaded or written beyond the described local data file.
The skill requests no environment variables, binaries, or external credentials. The declared requirements are minimal and proportional to the stated functionality.
always:false and normal invocation behaviour. The skill writes only its own data/memo.json and does not modify other skills or system configuration. No elevated persistence or privileges are requested.
Guidance
This skill appears to do what it says — record and remind about emotional moments — and it only writes to a local data/memo.json. Before installing, consider the following: 1) data sensitivity: entries will contain private emotional details; confirm where the agent stores workspace files and whether that location is backed up or synced to cloud services. 2) encrypt or protect data/memo.json (disk encryption, application-level encryption, or store secrets in a protected store) or require user opt-in before saving. 3) access controls: decide who (which accounts/people) can read or invoke the skill and add explicit consent/permission steps in the workflow. 4) retention & deletion: add commands for exporting, deleting, or anonymizing entries and a clear retention policy. 5) auditing: consider logging when entries are read/surfaced and who triggered the reminders. If the skill ever adds network calls, external endpoints, or requests credentials, treat that as a significant change and re-evaluate. Providing explicit instructions in SKILL.md for consent, encryption, and deletion would increase confidence.
Latest Release
v1.0.0
- Initial release of emotional-memo: a shared emotional notebook for relationships. - Records emotional moments with warmth and empathy, using a structured schema in `data/memo.json`. - Gently reminds users before old wounds are touched, surfacing relevant previous entries without blame. - Offers translations of difficult feelings into “gentle”, “calm”, or “direct” messages. - Detects patterns in emotional triggers and needs, encouraging reflection without judgment. - Maintains a privacy-first, non-judgmental, and supportive tone throughout all workflows.
Popular Skills
Published by @zj-zc on ClawHub
