Pregnancy Care
v1.0.0A comprehensive pregnancy care assistant that tracks gestational age, manages medical checklists, provides weekly updates, and offers personalized advice for...
⭐ 0· 144·0 current·0 all-time
by@ginwu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with provided files: scripts implement gestational calculations, milestone/checklist management, roles, and archiving. No unrelated binaries, credentials, or remote endpoints are requested.
Instruction Scope
SKILL.md instructs the agent to determine user_id and invoke the local helper script for context, task management, and archiving. It also instructs using the LLM to extract dates when parsing fails. The SKILL.md asks the agent to 'Create a Core Memory of the event' on archive — that will store an additional record in the agent's memory system if the agent follows that instruction. SKILL.md does not explicitly disclose that user data is written to a local file.
Install Mechanism
No install spec or external downloads; code is instruction-only plus included local scripts. Nothing in the manifest pulls remote code or executes network installs.
Credentials
No environment variables or external credentials are requested (good). However, the helper script persistently stores user data in a local file at ~/workspace/data/pregnancy-care/user_data.json (or d:\workspace on Windows). This is unencrypted, persistent storage of sensitive health data and may be surprising; the hard-coded workspace path is opinionated and may create files in users' home or root drives without asking.
Persistence & Privilege
always: false (normal). The skill persists user data to disk and updates it across runs; it does not request elevated system privileges or modify other skills. Be aware the SKILL.md suggests creating a 'Core Memory' on archive, which causes additional persistent storage in the agent/platform memory if performed.
Assessment
This skill appears to implement what it claims and does not contact external services or ask for credentials — that is good. Before installing: (1) Review and fix the helper script: pregnancy_helper.py is truncated (a stray token 'eli' appears at the end) and will likely cause the CLI to fail; do not rely on it until corrected. (2) Understand privacy: user pregnancy data is stored unencrypted at ~/workspace/data/pregnancy-care/user_data.json (or d:\workspace on Windows). If you will store personal health data, decide whether that storage location, lack of encryption, and file permissions are acceptable. (3) The SKILL.md suggests creating a Core Memory on archive — that would store the event in the agent's memory system (another persistent copy). If you do not want persistent copies in agent memory, do not follow that step. (4) Test the skill in a sandbox or non-sensitive environment first (or run inside a container) to verify behavior after fixing the script. If you want, provide the full end of pregnancy_helper.py (the truncated portion) so I can re-check for functional or security problems.Like a lobster shell, security has layers — review code before you run it.
latestvk976qpvpmbpq02hvbwjqe1rv258315qf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.