ℹ
Purpose & Capability
The SKILL.md describes a Node.js module (molt-life-kernel) that provides persistent ledgers, heartbeats, snapshots, and witness gates — which is coherent with the skill's stated purpose. However, the published skill is instruction-only (no code, no install spec) yet the instructions explicitly tell the agent to run `npm install molt-life-kernel` and `git clone https://github.com/X-Loop3Labs/molt-life-kernel.git`. This is a provenance/packaging mismatch: either the skill should include an install spec or code, or it is delegating to fetch external code at runtime.
⚠
Instruction Scope
Runtime instructions direct the agent to install external code (npm/git), append 'everything' to an append-only ledger, store snapshots in the agent workspace, and use witness callbacks for human approval. 'Record everything — append-only, never delete' is an explicit instruction that can capture and persist sensitive user data. The SKILL.md also suggests integrating with agent sessions, workspaces, and cron jobs — all of which could lead to broad data collection and persistent storage beyond the agent's immediate session.
⚠
Install Mechanism
There is no install specification in the skill manifest, yet the instructions recommend `npm install` and `git clone` from an external GitHub repo. That means an operator following the instructions will fetch and run third-party code at runtime without the skill declaring or packaging it. Because the package source (owner/repo) and homepage are effectively 'unknown' in the registry metadata and no integrity or release-host guarantee is provided, this is a moderate-to-high supply-chain risk.
ℹ
Credentials
The manifest declares no required environment variables or credentials, but the behavior described (persistent ledger, snapshots, witness-gates, cron jobs) normally requires storage/backing services or workspace permissions. The absence of declared storage/config requirements is a mismatch: either the skill expects to use the agent workspace (local) or it omits required external credentials. Also, the instruction to 'record everything' can capture sensitive secrets unless storage/retention/access controls are specified.
ℹ
Persistence & Privilege
The skill does not request always:true and keeps normal agent invocation defaults, which is appropriate. It does, however, instruct creation of an append-only ledger and snapshot artifacts in the agent workspace — persistent data will remain across sessions. That persistent storage is a functional requirement but increases privacy/retention risk; the skill does not document retention, encryption, or access controls.