Security audit
Family Nutrition Planner
Security checks across malware telemetry and agentic risk
Overview
The skill's code and instructions match its stated purpose (generating family meal plans and shopping lists); there are no requests for secrets, network endpoints, or unusual install steps, only minor quality/packaging oddities.
This skill appears internally consistent with its purpose and does not request credentials or perform network calls in the provided files. Before installing or running it: (1) review handler.py to ensure no omitted/truncated code adds network or file-exfiltration behavior (the supplied handler was truncated in the listing), (2) remove or adjust the hardcoded path in scripts/test-handler.py (it references a specific user's home directory), and (3) run the tests in an isolated environment (or inspect the implementation of handle_nutrition_request/handle_nutrition_calculation) to confirm there are no runtime errors or unexpected behavior. The package.json and small version mismatch are packaging oddities — harmless but worth cleaning up. If you need higher assurance, request the complete handler.py file (untruncated) and a brief description of any runtime logging or telemetry the author may have intended.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.