Habit Coach
v1.0.0习惯养成教练。充当AI问责伙伴，帮助建立、追踪和坚持好习惯。Keywords: 习惯养成, 自律, habit tracker, 打卡.
⭐ 0· 94·6 current·6 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (habit coach, tracker, accountability) align with included script and docs. The shipped script implements track/review/plan and persists records locally. Minor mismatch: SKILL.md asks to 'pip install requests' but the script does not import or use requests — this appears unnecessary but not malicious.
Instruction Scope
Runtime instructions only run the local Python script with explicit commands (track/review/plan). The SKILL.md does not instruct reading unrelated system files, environment variables, or sending data to external endpoints. It does instruct installing requests (unused), and it contains explicit guidance to avoid processing unauthorized sensitive personal data.
Install Mechanism
No install spec; this is an instruction-only skill with a small bundled Python script. No downloads from external URLs or archive extraction are present. Low install risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The script only accesses a local data directory (../data) relative to the scripts folder to read/write a JSON file — this is proportional to a local habit tracker.
Persistence & Privilege
always:false (default) and autonomous invocation allowed (platform default). The skill persists only its own data file under a data/ directory and does not modify other skills or system settings.
Assessment
This skill appears to be a simple, local habit-tracking helper. Things to consider before installing: (1) The SKILL.md recommends 'pip install requests' but the included script doesn't use requests — you can skip installing it or inspect/modify the script first. (2) The tool writes a JSON file to data/ (relative to the skill); review that directory for any personal information you wouldn't want stored. (3) Because the package source is unknown, run the script in a restricted environment (local sandbox or VM) if you want extra safety, and inspect the code before giving it access to sensitive data.Like a lobster shell, security has layers — review code before you run it.
latestvk97082wkwtnxpt9bb6zqra7qk983jr6x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.