Security audit
Security checks for vulnerabilities and agentic risk
This health-coaching skill is purpose-aligned and locally scoped, with some safety and clarity caveats users should understand before using it.
Before installing, understand that ClawCoach stores personal profile and food-log data in ~/.clawcoach/. The roast persona may use blunt humor, though the skill includes limits against body-image or distress-related mocking. Users outside the United States should not rely on the listed crisis numbers as their only emergency resource.
The phrase allowing persona switching on commands 'or similar' is overly broad and can cause unintended state changes from ambiguous user language. In a coaching skill with persistent profile storage, accidental or adversarially induced persona changes can alter tone and safety expectations, especially given the presence of an aggressive 'savage roaster' mode.
The crisis response hard-codes US-only support numbers without qualifying geography or offering alternatives, which can misdirect users in distress outside the United States. In a health and eating-behavior coaching context, this is more dangerous because the skill explicitly handles self-harm, purging, binging, and severe emotional distress, where incorrect crisis routing may delay access to appropriate help.
The file instructs the skill to use a fixed 'lowercase typing style' as part of its response behavior. This is a language/style constraint imposed by default, and the file does not indicate any user choice or opt-in for that locale/style preference.
The instruction "Clear, complete sentences with proper capitalization" imposes a specific language/writing-style convention. Under the policy, locale or language constraints should not be forced unless the skill offers user choice or clearly justifies the restriction.
No suspicious patterns detected.
