skill-calorie
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security guard for file system access, ensuring that database and photo storage paths are restricted to temporary directories unless explicitly overridden by an environment variable. This prevents accidental or malicious modification of sensitive system files.
- [SAFE]: Data integrity is maintained through the use of the node:sqlite native module with parameterized queries, which inherently protects against SQL injection attacks.
- [SAFE]: The user interface is rendered using HTML templates where all dynamic content is properly escaped using a dedicated utility, mitigating potential Cross-Site Scripting (XSS) risks within the agent's display environment.
- [SAFE]: Analysis of the source code and metadata reveals no signs of prompt injection, hardcoded credentials, or suspicious network operations. The skill's behavior is entirely consistent with its stated purpose of calorie and fitness tracking.
Audit Metadata