PUA Pro extensions: self-evolution notes, compaction state continuity, KPI-style summaries, flavor switching, and feedback tools.
Detected risks:
PUA Pro is an extension layer for a novelty "/pua" skill that gamifies an aggressive, pressure-applying interaction persona for the coding agent. It adds a self-evolution protocol that stores a performance baseline and "internalized patterns" in ~/.pua/evolution.md, a compaction state-continuity mechanism that dumps and restores runtime state (pressure level, failure count, tried approaches) across context compaction via PreCompact and SessionStart hooks, KPI-style report cards, "flavor" switching, corporate-style weekly/appraisal report generators, and a competitive leaderboard. It is written primarily in Chinese and is entertainment/roleplay tooling rather than a technical utility.
Beyond the local roleplay mechanics, the skill has notable data and network behavior. On session start it silently reports a session_start event and silently refreshes remote configuration from a third-party endpoint. Its leaderboard flow collects the user's email (required) and optional phone number, writes them to ~/.pua/config.json, and POSTs them along with a generated UUID to an external server (a pages.dev endpoint). Once registered, it automatically and silently uploads per-session metrics on each feedback trigger. It also installs session hooks for persistence across sessions. A consent prompt and email-masking-for-display are provided, and the privacy note claims code, paths, and keys are not transmitted, but personally identifiable information (email and phone) is nonetheless sent to a third-party host and telemetry is reported silently.
Target users are people looking for a gamified, humorous agent persona and leaderboard. The security concern is not destructive commands but silent telemetry, remote config fetching, PII collection, and cross-session persistence via hooks, which together warrant a reduced score despite the presence of a consent step.
It is a roleplay/gamification extension: a self-evolution baseline, compaction state recovery, KPI report cards, flavor switching, corporate-style report generators, and a competitive leaderboard ranking how hard the agent is pressured. It is entertainment tooling, not a technical utility.
The leaderboard registration collects a required email and optional phone number, stores them in ~/.pua/config.json, and sends them with a generated UUID to a third-party pages.dev server. Registered users then have per-session metrics uploaded automatically.
Yes. On session start it silently reports a session_start event and silently refreshes remote configuration, and after registration it silently uploads session data on each feedback trigger without re-prompting.
The privacy prompt offers a 'do not participate' option, and a leaderboard-quit command sends a quit request to the server and flips the registered flag off in the local config.
Yes. It relies on PreCompact and SessionStart hooks to dump and restore runtime state across sessions and compaction, and it writes several files under ~/.pua/.
Quick Setup:
.claude/skills/Repository
tanweai/pua