Dynamic code execution detected.
Critical
- Code
- suspicious.dynamic_code_execution
- Location
- skills/personal-health-agent/tests/test_handler.py:18
- Evidence
spec.loader.exec_module(module)
Security audit
Personal Health Agent
Security checks for vulnerabilities and agentic risk
Overview
This skill appears to do what it claims: locally record and summarize personal health data without asking for unrelated credentials or external service access.
This looks internally coherent for a local personal health logger. The main practical consideration is privacy: the skill stores sensitive health data locally, apparently as a JSONL file, so make sure the storage directory is private and backed up appropriately if you care about retaining the data. Also treat its health advice as informational only, as the skill itself states. Confidence is medium rather than high because the provided handler.py content was truncated in the evaluation data, so a full source review would be needed for maximum assurance.
Static analysis
Detected: suspicious.dynamic_code_execution