Convict Conditioning

• Outcome: Pass
• Latest audit: Jun 12, 2026 at 2:15 PM UTC
• Version:
  1.0.0

Overview

This appears to be a fitness-advice skill with some safety-disclaimer and trigger-breadth gaps, but no evidence of malicious behavior or privileged access.

Install only if you want bodyweight fitness guidance, and treat it as general training information rather than medical or rehabilitation advice. Users with pain, injuries, medical conditions, pregnancy, or recent surgery should consult a qualified professional before following the routines; the publisher should narrow the triggers and add prominent safety warnings.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

High

• Confidence: 97% confidence
• Finding: The trigger list is extremely broad and includes generic terms like bodyweight, training, strength, pushup, squat, and home gym, which can cause the skill to activate during ordinary fitness conversations where the user did not request this specific skill. Unintended activation can override a more relevant tool or inject prescriptive exercise guidance into unrelated contexts, increasing safety and trust risks in a health-adjacent domain.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill presents onboarding prompts and actionable training instructions before any prominent injury warning, despite recommending demanding bodyweight progressions such as bridges, one-leg squats, and handstand work. In a fitness skill, missing or delayed safety guidance can lead users to attempt exercises beyond their ability, raising the risk of strain, falls, or aggravation of existing conditions.

Missing User Warnings

Low

• Confidence: 91% confidence
• Finding: The passage gives progression advice around advancing difficult bodyweight movements and explicitly references injury from progressing too quickly, but it does not include a clear safety disclaimer, readiness caveat, or recommendation to stop if pain occurs. In a fitness skill, users may treat this as actionable instruction and attempt unsafe progressions without considering individual limitations, prior injuries, or medical conditions.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill gives recovery-from-injury advice in a health and fitness context without any caution to consult a clinician, stop if pain worsens, or account for individual medical limitations. Telling an injured user that bodyweight training is safer and that their body will signal readiness may encourage unsafe self-rehabilitation and aggravate an existing injury.

VirusTotal

64/64 vendors flagged this skill as clean.