Security audit
Security checks for vulnerabilities and agentic risk
This is a simple fitness-plan writing skill with clear safety boundaries and no evidence of hidden access, code execution, data exfiltration, or persistence.
This appears safe to install for generating workout-plan drafts. Users should treat it as general fitness guidance, avoid sharing unnecessary sensitive health details, and consult a qualified professional for injuries, cardiovascular conditions, post-surgery training, or medical concerns.
All user-facing metadata, triggers, and instructions are written only in Chinese, and the skill does not indicate that users may choose another language. Under the stated policy, a language-specific constraint should either be optional for the user or clearly justified as region- or locale-specific.
The listed trigger phrases such as “健身计划”, “居家健身”, and “训练安排” are generic requests that could appear in ordinary conversation, making unintended activation more likely. The file does not provide narrowing conditions, exclusions, or negative examples that clarify when the skill should and should not activate.
L03、L26 和 L74 明确将“训练记录表”列为该技能的标准输出内容，但 L69 又称“记录表”属于增强能力，仅在 Pro 版本提供。这不是简单遗漏，而是同一文档内对该技能是否提供记录表能力的直接冲突，导致开发者意图表述不一致。
No suspicious patterns detected.
