Bmi
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: bmi Version: 2.0.1 The BMI skill is a local health tracking tool that logs entries to a directory in the user's home folder (~/.local/share/bmi). While the script contains a logic bug in scripts/script.sh (a duplicate 'export' case branch prevents the actual export function from executing), the code lacks any indicators of malicious intent, data exfiltration, or unauthorized command execution.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone with access to the user's account, backups, or local files may be able to view logged weight, BMI, goals, or related health notes.
The skill persistently records fitness and BMI-related activity, which can include sensitive health information even though it remains local.
All data is stored locally at `~/.local/share/bmi/`. Each action is logged with timestamps.
Use the skill only for information you are comfortable storing locally, and protect or periodically delete/export the data directory if needed.