ClawHub
Back to skill

Security audit

Fitness Trainer

Security checks across malware telemetry and agentic risk

Overview

This is a simple fitness guidance skill with no code or data access, but its workout and nutrition advice should be treated as general wellness information.

Install only if you want general fitness and training-program guidance. Do not rely on it for diagnosing pain or injuries, managing medical conditions, eating-disorder concerns, pregnancy, medication interactions, or clinical nutrition decisions; use a qualified professional for those cases.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill description is written with broad activation language such as helping with fitness, exercise, nutrition, and training in general, which can cause the skill to trigger on a wide range of loosely related wellness queries. Over-broad routing is dangerous because it may cause the assistant to provide domain-specific health-adjacent advice when a safer, narrower, or more qualified response would be more appropriate.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The "When to Use" section lists generic triggers like workout plans, nutrition advice, and injury prevention without any scope limits, disqualifiers, or escalation criteria. This increases the chance that the skill will be selected for requests involving pain, injuries, medical conditions, or specialized nutrition concerns where generic fitness advice could be unsafe.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill gives prescriptive exercise and nutrition guidance, including calorie deficits/surpluses, macronutrient targets, training frequency, and injury-prevention framing, but it does not warn users that the advice is general information rather than medical or individualized guidance. In a health-adjacent domain, omission of this disclaimer can lead users with injuries, chronic disease, pregnancy, disordered eating risk, or other contraindications to rely on advice that may worsen their condition.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.