Security audit

Health Toolkit Free

Security checks across malware telemetry and agentic risk

Overview

This skill is a local personal health tracker that stores health records on the user's machine, with some privacy-sensitive behavior the user should understand before using it.

Install only if you are comfortable storing personal health information in local files under ~/.health. Review the quick-start and backup commands before running them, avoid syncing the folder to cloud storage unless you intend to, and consider local file permissions or encryption on shared machines.

SkillSpector

By NVIDIA

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Description-Behavior Mismatch

Medium

Confidence: 91% confidence
Finding: The skill repeatedly claims the free edition is local-only and privacy-safe, yet it declares the exec tool, which can run arbitrary commands including network-capable ones. That mismatch is dangerous because users and orchestrators may trust the local-only claim while the skill retains capability to exfiltrate health data or perform non-local side effects.

Context-Inappropriate Capability

Medium

Confidence: 90% confidence
Finding: A personal health tracking skill does not inherently require arbitrary shell execution, especially when handling sensitive health data. Granting exec broadens the attack surface significantly: prompt injection, malicious inputs, or agent misuse could turn a simple health tool into a mechanism for file access, command execution, or data exfiltration.

Intent-Code Divergence

Medium

Confidence: 95% confidence
Finding: The documentation states the free edition is local-only and does not support sync, but later provides rsync-based cloud backup instructions. For health data, this contradiction can mislead users into exposing sensitive records to external storage despite privacy-oriented claims.

Missing User Warnings

Medium

Confidence: 87% confidence
Finding: The examples write health records to persistent local files without prominently warning the user that sensitive personal data will be stored on disk. For health information, silent persistence increases privacy risk, especially on shared machines, backups, or systems with weak file permissions.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The quick-start shell commands create directories and write configuration files automatically, but the documentation does not clearly warn users about these filesystem changes. Because the data concerns personal health, undisclosed persistence and initialization steps create meaningful privacy and consent issues.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.