Security audit
Habit Quest Logger
Security checks across malware telemetry and agentic risk
Overview
The skill is internally consistent: it is a local, descriptive habit-planning helper that only reads its SKILL.md and user input and does not request credentials, make network calls, or perform external actions.
This package appears low-risk and behaves as a local, read-only formatter for the included SKILL.md. If you plan to install: (1) inspect handler.py yourself or run the included tests to confirm behavior; (2) note the skill's source/homepage is unknown—prefer packages from maintainers you trust; (3) no credentials or network access are requested, but if you do not want the agent to call the skill autonomously, disable autonomous invocation in your agent settings.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.