Security audit

Weight Loss Planner

Security checks across malware telemetry and agentic risk

Overview

This weight-loss skill is mostly coherent, but it should be reviewed because it can provide detailed diet and exercise plans without enough medical screening or safety boundaries.

Install only if you understand it is general wellness guidance, not medical or dietetic advice. Before using any generated plan, confirm the skill asks about health conditions, medications, injuries, pregnancy, age, eating-disorder history, activity level, and allergies; users with risk factors should consult a clinician or qualified dietitian/trainer before following the plan.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The trigger conditions are broad enough to activate on general health, fitness, calorie, or BMI-related conversations that may not actually request a weight-loss plan. In a health-related skill, over-triggering can cause the agent to provide personalized diet/exercise guidance in unintended contexts, increasing the chance of inappropriate or unsafe advice without sufficient user intent or context.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The file provides detailed exercise prescriptions, including HIIT, weighted squats, plyometrics, elevated heart-rate targets, and progression guidance, but lacks a prominent user-facing medical disclaimer, screening step, or stop conditions for people with injuries, cardiovascular risk, pregnancy, chronic disease, or medication-related limitations. In a weight-loss skill aimed at the general public, users may over-trust the plan as personalized health guidance and attempt unsafe routines, increasing the risk of injury or adverse medical events.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: This file provides prescriptive calorie-restricted meal plans and suitability labels for broad user groups, but it does not warn that the guidance is not individualized medical or nutritional advice. In a weight-loss skill, users may have contraindications such as eating disorders, pregnancy, diabetes, kidney disease, adolescence, or unusually low body weight, so generic plans can create real health risk if followed without screening.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.