Security audit
Security checks for vulnerabilities and agentic risk
This is a local-only health tracking skill, but it gives supplement and hormone guidance while collecting sensitive sexual-health symptoms without adequate medical cautions.
Review this carefully before installing. It appears to be a Markdown-only local tracking skill, not malware, but it handles sensitive health information and gives supplement/hormone advice. Do not treat it as diagnosis or treatment, and consult a qualified clinician before using supplement doses or relying on it for fatigue, libido, infertility, or suspected hormone disorders.
The trigger phrase 'test levels' is especially risky because 'test' is a common built-in or generic command fragment, making command shadowing and unintended routing likely. In this context, accidental invocation could expose users to health and supplement guidance they did not explicitly request, increasing confusion and misuse risk.
The trigger set is broad enough to cause accidental invocation, especially phrases like 'test levels' and 'hormone optimization' that can overlap with unrelated fitness, lab, or generic 'test' conversations. In a health-related skill, unintended activation is more concerning because it can surface supplement and hormone advice in contexts where the user did not clearly request it.
The skill provides health tracking guidance and concrete supplement recommendations, including Vitamin D and Zinc dosages, without warnings about medical limitations, contraindications, or when to seek professional care. This is dangerous because users may treat the content as personalized medical advice, potentially delaying diagnosis of endocrine disorders or taking inappropriate supplements based on self-tracking alone.
No suspicious patterns detected.
