Numerology Fortune

Analyzes your numerology profile using the Pythagorean system. Triggered when users ask about Life Path Numbers, Expression Numbers, and other numerology top...

This skill appears to do only offline numerology calculations, which fits its description, but it will store and reuse sensitive personal data (full legal name and birth date) in a MEMORY.md file inside the skill repo and may read fortune-hub/MEMORY.md if present. Before installing or invoking: (1) confirm you’re comfortable with the skill saving your PII to the skill directory and decide where that file is stored/backed up; (2) consider asking the skill to never cache or to anonymize data (e.g., use initials or a nickname) if you want less persistence; (3) inspect the repository (including MEMORY.md and the references files) to ensure no unexpected endpoints or secrets are present; (4) require explicit user consent before the skill reads or reuses cached profile data; and (5) remove or redact MEMORY.md if you later want to delete persisted PII. If you need stronger guarantees (encryption, access auditing, or avoidance of persistent storage), do not install until those controls are added.

Type: OpenClaw Skill Name: numerology-fortune Version: 1.2.0 The skill is classified as suspicious because it instructs the AI agent to collect and persist sensitive Personally Identifiable Information (PII), specifically the user's full legal name and date of birth, into a local MEMORY.md file. While these inputs are functionally required for the stated purpose of Pythagorean numerology, the systematic storage of PII in plaintext and the instructions in SKILL.md to check for shared data in 'fortune-hub/MEMORY.md' create a high-risk data harvesting pattern. No explicit evidence of remote exfiltration or malicious code execution was found, but the persistent collection of identity data within the agent's environment poses a significant privacy risk.