You could show up to 6 random friends like this:
Code:
global $vbulletin;
$friends = $vbulletin->db->query_read_slave("SELECT
user.*, userlist.type, userlist.friend
FROM " . TABLE_PREFIX . "userlist AS userlist
INNER JOIN " . TABLE_PREFIX . "user AS user ON (user.userid = userlist.relationid)
WHERE userlist.userid = " . $vbulletin->userinfo['userid'] . " AND userlist.type='buddy' AND userlist.friend='yes'
ORDER BY RAND()
LIMIT 6
");
while ($friend = $vbulletin->db->fetch_array($friends))
{
$output .= '<a href="member.php?u=' . $friend['userid'] . '">' . $friend['username'] . "</a><br />\r\n";
}