Nutrition Planner

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may not run as documented, and the actual CLI behavior cannot be reviewed from the supplied artifacts.

Why it was flagged

The package declares a CLI entry point, and SKILL.md instructs use of that path, but the provided manifest contains no scripts/nutrition-planner file. This is an incomplete artifact/provenance issue.

Skill content
"main": "scripts/nutrition-planner", "bin": { "nutrition-planner": "scripts/nutrition-planner" }
Recommendation

Only install or use it if the missing script is supplied from a trusted source and can be reviewed; otherwise treat it as incomplete.

What this means

Personal health and diet-related information may remain on the local machine after use.

Why it was flagged

The skill discloses persistent local storage for nutrition planning data, which likely includes personal profile details, dietary restrictions, and allergies.

Skill content
数据存储在 `~/.openclaw/data/nutrition-planner/`: - `nutrition_planner.db` - SQLite 数据库
Recommendation

Avoid entering sensitive medical information unless you are comfortable storing it locally, and delete the database if you no longer want the data retained.