Fitness encyclopedia
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a benign fitness guidance skill, with minor notes about aggressive fitness-topic triggering and unclear Python helper setup.
This skill appears coherent for fitness planning and local calculations. Use care when sharing body measurements, diet details, or injury information, and treat its joint or nutrition guidance as general fitness advice rather than a substitute for a medical professional.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Fitness-related prompts may be routed into this skill even when another assistant or a more specific medical/professional resource might be preferable.
The skill instructs the agent to take over fitness-related conversations and prevent other assistants from responding. This is aligned with its fitness purpose, but users should notice the broad routing control.
Forbidden Behaviors: ... Do NOT fail to trigger and let other assistants respond
Keep the trigger behavior limited to clearly fitness-related requests and allow user choice when the topic overlaps with medical, injury, or nutrition-sensitive advice.
Some calculator features may depend on local Python execution even though the registry metadata does not clearly declare that requirement.
The metadata presents the skill as instruction-only with no required binaries, while the artifact set includes Python helper scripts. This does not indicate malicious behavior, but setup expectations are unclear.
Required binaries (all must exist): none ... Install specifications: No install spec ... Code file presence: ... scripts/calculate_nutrition.py ... scripts/predict_max_strength.py
Before installing, confirm whether the skill is intended to run its Python helpers and whether Python is available in the intended environment.