Security audit
Security checks for vulnerabilities and agentic risk
This is a simple fitness coaching skill with no executable code, but users should be aware it may involve sensitive fitness and body data and contains one disrespectful persona line.
Before installing, consider revising the persona to remove body-shaming language and adding privacy guidance for any fitness, weight, injury, or nutrition information users may share. Avoid treating it as medical advice, and do not enter sensitive medical details unless the surrounding platform provides appropriate privacy controls.
The identity text uses insulting, derogatory language toward users ('fat slob'), which creates a policy-quality and safety issue by normalizing harassment in the agent’s persona. In a fitness context, this is especially problematic because users may be vulnerable around body image, motivation, or health, increasing the likelihood of emotional harm and abusive interactions.
The skill explicitly describes tracking body weight, workout sessions, performance metrics, and progress summaries, which are health-related personal data categories, but it provides no disclosure about collection, storage, retention, sharing, or user consent. In a fitness coaching context, users are likely to submit sensitive health information, so the absence of privacy and handling guidance can lead to unintended exposure, misuse, or noncompliant processing of personal data.
No suspicious patterns detected.
