Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Nutrition Planner

v1.0.1

Personal nutrition and meal planning system with calorie tracking and recipe recommendations

0· 371·2 current·2 all-time
byhaidong@harrylabsj

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for harrylabsj/nutrition-planner.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Nutrition Planner" (harrylabsj/nutrition-planner) from ClawHub.
Skill page: https://clawhub.ai/harrylabsj/nutrition-planner
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install harrylabsj/nutrition-planner

ClawHub CLI

Package manager switcher

npx clawhub@latest install nutrition-planner
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The name/description (nutrition planner CLI) matches the SKILL.md usage, but the instructions require running ${SKILL_DIR}/scripts/nutrition-planner. The bundle does not include those scripts (only SKILL.md, SKILL_EN.md, and package.json), so what the skill promises cannot be executed as provided. package.json references a repository URL but there is no install spec to fetch/verify that code.
Instruction Scope
Instructions direct the agent/user to create profiles, generate plans, query nutrition, and store data in ~/.openclaw/data/nutrition-planner/ (SQLite). Those actions are appropriate for a meal-planner, but they assume local CLI scripts exist. The SKILL.md does not instruct the agent to access any unrelated system paths or external endpoints, but it does instruct creating/reading a local DB and files in the user's home directory.
!
Install Mechanism
There is no install specification and no included executable scripts. package.json points to scripts/nutrition-planner as the CLI entry and contains a repository URL, but no mechanism is provided to fetch or install that code. This creates ambiguity about where the executable code would come from and how it would be verified.
Credentials
The skill declares no required environment variables, no credentials, and no special config paths beyond its own data directory (~/.openclaw/data/nutrition-planner/). Requesting local storage of user profiles and a SQLite DB is proportionate for the stated purpose, but storing personal profile data locally may have privacy implications.
Persistence & Privilege
always is false and the skill does not request any elevated persistence or cross-skill configuration changes. Autonomous invocation is enabled by default (not flagged alone) but does increase the importance of resolving the code/installation ambiguity first.
What to consider before installing
Do not install yet. The SKILL.md expects a local CLI at ${SKILL_DIR}/scripts/nutrition-planner and a local SQLite DB, but the package does not include those scripts or an install step. Before proceeding, ask the publisher for: (1) the actual script files or a secure install spec (e.g., GitHub release or official package registry) so you can audit the code; (2) confirmation of the repository URL and a signed release or checksum to verify the downloaded code; (3) whether the tool will ever transmit data externally (network calls) and, if so, what endpoints and why. Also consider privacy: the skill will store personal profile info in ~/.openclaw/data/nutrition-planner/nutrition_planner.db, so ensure you are comfortable with local storage and backups. If the publisher supplies the scripts, review them for unexpected network access, credential use, or file system operations before enabling autonomous invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dbxna11d6jpd9hhxdkkznq182p01m
371downloads
0stars
2versions
Updated 22h ago
v1.0.1
MIT-0
  • 👤 饮食需求分析: 根据年龄、体重、身高、活动量计算营养需求
  • 🍽️ 个性化菜谱推荐: 基于目标的智能食谱推荐
  • 📊 营养成分计算: 自动计算每餐热量、蛋白质、碳水、脂肪
  • 📅 周/月饮食计划: 自动生成多天的完整饮食计划
  • 🛒 智能购物清单: 根据计划自动生成购物清单

使用

创建用户档案

# 基础档案
${SKILL_DIR}/scripts/nutrition-planner profile-create \
  --name "张三" \
  --age 30 \
  --gender male \
  --weight 70 \
  --height 175 \
  --goal lose

# 完整档案(含饮食限制和过敏)
${SKILL_DIR}/scripts/nutrition-planner profile-create \
  --name "李四" \
  --age 25 \
  --gender female \
  --weight 55 \
  --height 160 \
  --activity moderate \
  --goal maintain \
  --restrictions vegetarian \
  --allergies peanuts shellfish

活动量选项

  • sedentary - 久坐(办公室工作)
  • light - 轻度活动(每周1-2天运动)
  • moderate - 中度活动(每周3-5天运动)
  • active - 高度活动(每周6-7天运动)
  • very_active - 极高活动(体力劳动/运动员)

目标选项

  • lose - 减脂(每日-500kcal)
  • maintain - 维持(基础代谢)
  • gain - 增肌(每日+500kcal)

生成饮食计划

# 生成7天计划(默认)
${SKILL_DIR}/scripts/nutrition-planner plan-generate

# 生成14天计划
${SKILL_DIR}/scripts/nutrition-planner plan-generate --days 14

查看饮食计划

# 查看今日计划
${SKILL_DIR}/scripts/nutrition-planner plan-show

# 查看指定日期
${SKILL_DIR}/scripts/nutrition-planner plan-show --date 2024-01-15

生成购物清单

# 生成未来7天购物清单
${SKILL_DIR}/scripts/nutrition-planner shopping-list

# 生成未来14天购物清单
${SKILL_DIR}/scripts/nutrition-planner shopping-list --days 14

查询食物营养

# 查询单一食物
${SKILL_DIR}/scripts/nutrition-planner nutrition 鸡胸肉

# 模糊查询
${SKILL_DIR}/scripts/nutrition-planner nutrition 鸡

数据存储

数据存储在 ~/.openclaw/data/nutrition-planner/:

  • nutrition_planner.db - SQLite 数据库

内置食物数据库

包含以下类别的食物营养数据:

  • 主食:米饭、面条、馒头、燕麦、红薯、玉米、全麦面包
  • 蛋白质:鸡胸肉、鸡蛋、牛肉、三文鱼、豆腐、牛奶、虾仁
  • 蔬菜:西兰花、菠菜、胡萝卜、番茄、黄瓜、青椒、生菜、芹菜
  • 水果:苹果、香蕉、橙子、蓝莓、猕猴桃
  • 坚果油脂:杏仁、核桃、橄榄油

技术栈

  • Python 3.8+
  • SQLite
  • argparse

Comments

Loading comments...