Security audit

Fit

Security checks for vulnerabilities and agentic risk

Overview

This fitness skill is mostly coherent and has no code or persistence, but its broad trigger and injury-return advice need human review before use.

Review this skill carefully before installing if you may ask about pain, acute injury, rehab, or medical constraints. It should be treated as general fitness coaching only, not medical or physical-therapy advice, and users should seek professional evaluation for injuries, severe pain, worsening symptoms, swelling, neurological symptoms, or functional loss.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger scope is unusually broad because it activates on essentially any fitness-related goal, which increases the chance of unintended invocation in ordinary conversations about exercise, body composition, or injury recovery. In this skill, that broad scope is more concerning because the content includes training, nutrition, and injury-related guidance, so accidental activation could surface quasi-medical or high-impact advice without clear user intent.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill gives injury and return-to-training guidance without a medical safety warning, triage boundaries, or advice to seek professional evaluation for pain, acute injury, or worsening symptoms. That is dangerous because users may treat the skill as authoritative and resume activity too early or train around an injury inappropriately, increasing the risk of aggravation or delayed treatment.

Static analysis

No suspicious patterns detected.