Security audit

Fitness Trainer

Security checks for vulnerabilities and agentic risk

Overview

This is a simple fitness guidance skill with no executable code or data access, but users should treat its workout and nutrition advice as general wellness information.

Install this only for general fitness, workout-programming, and basic sports-nutrition help. Do not rely on it for pain, injuries, medical conditions, pregnancy, medications, eating-disorder concerns, minors, rapid weight changes, or clinical diet decisions; use a qualified clinician, physical therapist, or registered dietitian for those cases.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The skill description is broad enough to trigger on many generic health, wellness, or food-related requests, increasing the chance the agent invokes this skill when a more appropriate or safer general-purpose response is warranted. In a fitness context, over-broad activation can expose users to unscoped exercise or nutrition advice without first checking for injury, age, pregnancy, eating disorders, or medical conditions.

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The 'When to Use' triggers are vague and expansive, which can cause the system to route loosely related queries into this skill without clear boundaries. Because the content gives actionable training and nutrition guidance, ambiguous activation raises the risk of inappropriate advice being delivered in contexts needing medical screening or specialist escalation.

Missing User Warnings

High

Confidence: 98% confidence
Finding: The skill gives detailed exercise programming and nutrition targets but does not warn users about contraindications, injury risk, or the need for individualized medical assessment. In this context, omissions are dangerous because users may apply volume, intensity, calorie deficits, or macro targets despite underlying conditions, disordered eating risk, or physical limitations, potentially causing harm.

Static analysis

No suspicious patterns detected.