Habits
v1.0.0Build a personal habit tracking system with streaks, reviews, and progression.
⭐ 2· 1.1k·3 current·3 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (habit tracking with streaks/reviews) matches the instructions: defining habits, logging completions, showing streaks, and storing one-file-per-habit under ~/habits/. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Runtime instructions tell the agent to create and manage files in the user's home directory (~/habits/) and to prompt the user for daily check-ins. This is appropriate for a local habit tracker, but it does involve writing and reading user data on disk (unprotected plaintext files). There are no instructions to read other system files or transmit data externally.
Install Mechanism
No install spec and no code files are included (instruction-only). Nothing will be downloaded or written beyond what the agent itself does at runtime per the instructions.
Credentials
The skill declares no environment variables, credentials, or config paths. That is proportional to its stated purpose. Integration points (calendar, contacts, journal) are only mentioned conceptually and no credentials or APIs are requested or used.
Persistence & Privilege
always:false (normal). Model invocation is not disabled (default), so the agent could autonomously prompt for daily check-ins if allowed by the platform. That autonomy is typical for skills but may produce repeated prompts—no elevated system privileges are requested.
Assessment
This skill appears coherent and low risk. Before installing, be aware: 1) it will create and store plain-text habit files in ~/habits/ (review that folder if you keep sensitive notes there); 2) the agent may prompt you regularly if autonomous invocation is allowed — disable/model-invocation or revoke the skill if you don't want recurring prompts; 3) any integrations (calendar, contacts) would require you to supply credentials separately — the skill does not request them now; and 4) because it's instruction-only, there is no shipped code to inspect, so verify runtime behavior (what files are written and when prompts occur) during initial use. If you need encryption or stronger privacy, plan to store habit data in an encrypted location or use a different tool.Like a lobster shell, security has layers — review code before you run it.
latestvk97f3a3yr7sfx8dmgm4sej7fmx80wshk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✅ Clawdis
OSLinux · macOS · Windows