ClawHub

habit-tracker

v1.0.0

Track habit formation with daily check-ins, reminders for missed logs, and statistics on consecutive completion days.

⭐ 0· 275·0 current·0 all-time
by@hanksu7889
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (habit tracking, check-ins, reminders, stats) match the SKILL.md instructions. The only external artifact is a single local data file (memory/habits.json) which is appropriate for storing habit records.
ℹ
Instruction Scope
Instructions are limited to adding habits, recording daily check-ins, and viewing progress; they explicitly reference a local JSON (memory/habits.json). However the '提醒' (reminders) behavior is underspecified — the SKILL.md does not say how reminders are delivered or scheduled, which could grant the agent broad discretion (e.g., sending notifications via other integrated channels) unless constrained by the platform.
✓
Install Mechanism
No install spec and no code files — nothing is written to disk by an installer. This is the lowest-risk form (instruction-only).
✓
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond its own memory file. That is proportionate for the stated functionality.
ℹ
Persistence & Privilege
The skill expects to persist habit data to memory/habits.json. It does not request always:true and does not change other skills' configs, but you should confirm where 'memory/' is stored and who can read it (agent runtime, backups, or other installed skills).
Assessment
This skill appears to do what it says and asks for nothing extra. Before installing, confirm two things: (1) where the referenced memory/habits.json is stored and who can access it (privacy of your habit data), and (2) how reminders will be delivered — the SKILL.md is vague and the agent/platform may use other integrations (email, chat, notifications) unless you restrict it. If you require external notifications, prefer a version that explicitly declares the channel and any needed credentials; otherwise limit the skill to local-only storage and manual reminder checks.

Like a lobster shell, security has layers — review code before you run it.

latestvk979h15yatqvyz4xgh3gexw2tx82bdn6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments