Workout Readiness Check In

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent prompt-only workout readiness checklist; it mainly handles sensitive wellness details, and the only oddity is non-used capability signals for purchases/crypto that should not be granted.

This skill appears safe to use as a prompt-only fitness readiness aid, not as medical advice. Keep health details minimal, seek professional care for serious symptoms, and do not grant unrelated purchase, payment, wallet, or crypto permissions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your sleep, stress, soreness, illness, pregnancy/surgery status, and other health-related details could appear in the chat history or any memory the host platform saves.

Why it was flagged

The skill intentionally collects sensitive fitness and health-adjacent details and summarizes them over time. This is aligned with the readiness-card purpose, but the information is personal and should be handled carefully.

Skill content
Sleep quality and duration, energy, mood or stress, soreness... Red-flag screen... pregnancy, recent surgery... Record today's result in a 7-day trend view
Recommendation

Share only the minimum needed, avoid unnecessary medical detail, and disable or clear persistent memory if you do not want readiness history retained.

What this means

A workout readiness prompt should not need payment, purchase, or crypto-related authority.

Why it was flagged

These supplied capability signals do not match the workout-readiness purpose, although the reviewed files declare no API access, credentials, executable code, or purchase workflow. If a host translated these signals into permissions, they would be unnecessary.

Skill content
Capability signals: crypto; can-make-purchases
Recommendation

Use or install it as a document-only skill and deny any purchase, payment, wallet, or crypto tool permissions if the platform asks for them.