Habit AI

This skill appears to be a straightforward Habit AI API integration, but take these precautions before installing or using it: - Ask the publisher to declare HABITAI_API_KEY in the skill metadata (it currently isn't listed) so platform/permissions are clear. - Confirm where images will be processed: the SKILL.md tells the agent to analyze photos itself rather than using Habit AI's /analyze endpoints. Ask whether image data will be kept locally or transmitted elsewhere, and insist on explicit handling rules and user consent for image exposure. - Ask how USDA nutrition data is accessed or referenced — the skill asks you to 'use USDA data' but provides no data source or model instruction; verify accuracy expectations. - Because the skill source is unknown and homepage absent, treat the API key as sensitive: only provide a key with restricted scope/ability or use a throwaway key if testing. Revoke or rotate keys after evaluation. - Prefer a version that explicitly declares required env vars and documents privacy and data flow (where images or personal health details are sent and stored). If the publisher can clarify and fix the metadata (declare HABITAI_API_KEY) and explain the rationale for avoiding built-in analyze endpoints and for image handling, the inconsistencies would be resolved and the skill would be more trustworthy.