Sleep Tracker

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a local, user-invoked sleep and health tracker with no network or credential use, but it stores personal health data locally and users should understand where those files are kept.

This skill looks safe to use as a local tracker, but treat the entries as sensitive health data. Before relying on it, confirm which script or command you will run, where the logs are stored, and whether you want to change the storage location to a private directory.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your sleep, exercise, meal, reminder, or goal entries may remain on disk until you delete them.

Why it was flagged

The skill intentionally persists user-entered health and sleep entries plus command history. This is purpose-aligned, but the data can be sensitive.

Skill content
All data is stored in `$SLEEP_TRACKER_DIR` or defaults to `~/.local/share/sleep-tracker/`. The directory contains: `data.log` ... `history.log`
Recommendation

Use a private storage location, avoid entering details you would not want stored locally, and review or delete the log files when needed.

What this means

Sleep journal information could be kept in a predictable temporary path, which may be less private or less durable on some systems.

Why it was flagged

The included sleep journal script declares a fixed temporary-file location for journal data. For sleep diary information, this storage location is worth noticing because it differs from the documented app data directory.

Skill content
JOURNAL_FILE="/tmp/sleep_journal.txt"
Recommendation

Prefer storing journal data under the documented `$SLEEP_TRACKER_DIR` or another private directory with appropriate file permissions.