Security audit
Period Tracker
Security checks across malware telemetry and agentic risk
Overview
This is a local period-tracking skill that handles sensitive health data but keeps its behavior disclosed, scoped, and aligned with that purpose.
Before installing, understand that this skill will create and read local files containing menstrual and symptom history. That is appropriate for a period tracker, but the data is sensitive; review the local storage path and use the built-in export or deletion instructions if you no longer want the records kept.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.