Security audit
Security checks for vulnerabilities and agentic risk
This hydration tracker only stores simple water-intake data locally and does not show hidden network, credential, or destructive behavior.
Before installing, be aware that this skill will create persistent local files under ~/.water_reminder for your hydration history and goal. It does not appear to contact external services, but its reminder feature is just a manually invoked tip, not automatic scheduled reminders.
The skill description promises reminders, but the documented behavior only prints a tip when manually invoked, and it also omits disclosure that it persists data in the user's home directory. This mismatch is dangerous because users may trust inaccurate claims about functionality and storage behavior, leading to uninformed use of persistent local data access and reduced ability to assess privacy implications.
The skill declares no explicit tool scope or permissions while its documented behavior includes reading environment-related paths and performing persistent local file reads/writes under ~/.water_reminder. This is dangerous because it hides actual capabilities from users and reviewers, weakening informed consent and policy enforcement even if the current functionality appears limited to hydration data.
The command table says info shows version info (v1.0.0), but the manifest declares version 2.0.0 at L004 and the changelog also labels 2.0.0 as the current release at L060-L063. This is an active documentation contradiction about what the skill reports.
No suspicious patterns detected.
