ClawHub
Back to skill

Security audit

Estimate Calories

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a simple food-photo calorie estimator, but its numbers should be treated as rough guesses rather than medical or diet-critical advice.

Install only if you want rough nutrition estimates from food photos. Do not rely on its outputs for insulin dosing, eating disorder treatment, medical nutrition therapy, allergies, strict diets, or other health-critical decisions; verify important numbers with labels, weighed portions, authoritative nutrition sources, or a qualified professional.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to estimate calories and macronutrients from images using 'best judgement' but does not warn that outputs are approximate and unsuitable for medical, dietary, or other health-sensitive decisions. Users may over-trust the estimates for weight management, diabetes care, eating disorder behaviors, or other nutrition-related decisions, increasing the risk of harm from inaccurate results.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.