diet-record
v1.0.1Diet recording skill. Log meals via text description or food photo upload, auto-recognize food items and estimate nutrition/calories. Activate when user send...
⭐ 2· 40·0 current·0 all-time
bymijufeng@734818028
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (diet recording, photo/text input, nutrition estimation) aligns with the SKILL.md and the provided JSON templates. No unrelated credentials, binaries, or external services are requested. Photo analysis is described but no external API is required in the instructions — this is consistent for an instruction-only skill that expects the agent/platform to provide vision capabilities.
Instruction Scope
The instructions read and write two local files (diet-log.jsonl and diet-preferences.json) in the skill directory and accumulate personal diet/preferences data. This behavior is consistent with a logging skill but is a privacy-relevant action the user should be aware of. The SKILL.md also asks the agent to extract and persist dietary preferences from casual conversation (allergies, goals, etc.), which is expected but means the skill will store personal health-related data over time.
Install Mechanism
Instruction-only skill with no install spec, no downloads, and no code files that would be executed. This is the lowest-risk install profile and matches the skill's simple data-logging purpose.
Credentials
No environment variables, no external credentials, and no system config paths are requested. The only resources used are local files stored next to the skill, which is proportionate to a personal logger. There are no unexpected secret requests.
Persistence & Privilege
The skill is not marked always:true and uses only its own files; it does not request system-wide configuration changes or access to other skills' credentials. Autonomous invocation is allowed (platform default) but not combined with any broad credential access.
Assessment
This skill appears to do what it says: it will read/write two local files (diet-log.jsonl and diet-preferences.json) and automatically extract and store diet-related preferences and allergy information from conversations. Before installing, consider: (1) privacy — these files contain health-related data and will be stored in the skill directory (check where that is on your system and whether it is backed up or accessible to other processes); (2) the photo-auto-log option — enabling it will let the skill log meals automatically when you upload photos, so confirm you want that behavior; (3) retention and deletion — decide how to delete/export logs if you stop using the skill; (4) platform capabilities — the skill assumes the agent can perform image recognition locally (if your platform lacks vision features, photo recognition may not work); (5) if you require encryption or stronger access controls for health data, consider guarding or relocating these files. Overall there are no hidden endpoints, no credential requests, and no downloads, but treat stored diet and allergy data as sensitive.Like a lobster shell, security has layers — review code before you run it.
latestvk9790q8xqwj0g1mn62xn3j4np584tqzy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.