Security audit
Calorie Tracker
Security checks across malware telemetry and agentic risk
Overview
This calorie-tracking skill stores local food, weight, preference, and health-context notes for its stated purpose and does not include hidden execution, network exfiltration, or unrelated authority.
Install only if you are comfortable with a local calorie tracker maintaining food logs, weight trends, goals, and potentially sensitive health notes in ~/Clawic/data/calories/. The artifacts include reasonable safety guardrails, but calorie tracking can be harmful for some users, especially with eating-disorder history or medical conditions, so clinician-set targets should override the skill.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
59/59 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.