Security audit
Habit Coach
Security checks across malware telemetry and agentic risk
Overview
The plugin is a coherent habit-coaching tool, but it automatically creates persistent scheduled agent turns that can send messages and read or write user-selected local state files with too little scoping.
Review before installing. Use this only if you are comfortable with automatic scheduled reminders, third-party message delivery, and a local JSON state file containing habit history and configuration. Configure private delivery targets, avoid sensitive habit details, and prefer a dedicated state file path with limited permissions.
VirusTotal
65/65 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.