Fitbot

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your training profile, pain/injury notes, preferences, and workout logs may remain in the workspace and influence future advice.

Why it was flagged

The skill stores persistent personal fitness and health-related context, then reuses it as the source of truth for future coaching.

Skill content
`FITNESS.md` — who the user is and everything about their training ... `fitness/workouts/YYYY-MM-DD.md` — daily workout logs
Recommendation

Keep the workspace private, review `FITNESS.md` and workout logs periodically, and remove or correct sensitive or outdated health information.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the skill or environment may create recurring check-ins or reminders beyond a single chat session.

Why it was flagged

The skill supports optional recurring reminders, which is a disclosed persistence mechanism for fitness accountability.

Skill content
**Reminders**: if they want them, capture schedule/timezone/preferences and set up via cron or heartbeat
Recommendation

Only enable reminders deliberately, confirm the schedule/timezone, and make sure you know how to pause or remove any cron or heartbeat setup.