Habits

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent local habit-tracking skill that stores habit logs under ~/habits, with no code, credentials, or hidden behavior shown.

This looks safe for its intended use. Before installing, be aware that it creates persistent local habit files in ~/habits; avoid adding highly sensitive details, and require explicit approval before using any optional calendar, contact, or journal integrations.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI06: Memory and Context Poisoning

What this means

Your habit history, completion patterns, and notes may be saved locally and reused for future streaks or reviews.

Why it was flagged

The skill intentionally creates persistent local records about the user's habits and notes, which is expected for a habit tracker but may contain private personal information.

Skill content

Create `~/habits/` as workspace ... Each habit file has log entries: - Date, done (yes/no), notes

Recommendation

Track only information you are comfortable storing, keep notes minimal for sensitive habits, and review or delete files in ~/habits if needed.