fitness-analyzer
Warn
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to access and analyze highly sensitive personal health information (PHI) located at specific file paths, including data/hypertension-tracker.json and data/diabetes-tracker.json. While intended for its fitness analysis purpose, this behavior constitutes an exposure of private medical data.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a broad ingestion surface by reading multiple local data files that may be modified by other users or processes, combined with file-writing capabilities.
- Ingestion points: Data is loaded from data/fitness-logs/, data/fitness-tracker.json, data/hypertension-tracker.json, data/diabetes-tracker.json, and data/profile.json.
- Boundary markers: Absent. There are no instructions or delimiters provided to help the agent distinguish between legitimate fitness data and potential instructions embedded within those data files.
- Capability inventory: The skill uses Read, Grep, Glob, and Write tools, enabling a cycle of reading sensitive data and potentially writing malicious content back to the system.
- Sanitization: Absent. The skill instructions do not specify any validation or sanitization protocols for the ingested JSON data before it is used in calculations or reports.
Audit Metadata