Lofy Fitness

• Analyzed: May 12, 2026, 3:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: eae7f2b843d5a1aa4010e7f46ff736553eaee9f3f17c1a88eababeff1f32a435
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'lofy-fitness' appears benign. The `SKILL.md` file outlines a fitness tracking skill that reads from and writes to a local `data/fitness.json` file, which is necessary for its stated purpose of logging workouts, meals, and tracking progress. There are no instructions for the AI agent to perform malicious actions such as data exfiltration, unauthorized command execution, persistence, or prompt injection attempts to bypass user intent or access unrelated sensitive data. All instructions are directly related to the core functionality of a fitness tracker.