OnlyBaby

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may open local baby or contraction log files that the user references, which can contain sensitive personal health information.

Why it was flagged

The skill instructs the agent to read local files named or referenced by the user. This is expected for the stated purpose, but users should ensure only the intended JSON files are provided.

Skill content
Resolve file paths from user message or workspace (e.g. Downloads, project paths). Parse contractions as an array; baby data as object with `babyLog` and `birthday`.
Recommendation

Only point the skill at the intended contraction and baby-log JSON files, and avoid giving broad or ambiguous file references.

What this means

A user could mistake the report for medical diagnosis if they rely only on the verdict labels.

Why it was flagged

The skill asks for clear health and safety labels, which could be over-trusted in a medical context, but it also explicitly requires a medical-advice caveat and directs users to professionals when uncertain.

Skill content
**Mum safe?** (Yes / Monitor / Seek care) ... **Baby healthy?** (Yes / Monitor / Concern) ... **Caveat** One line: this is not medical advice; when in doubt, contact a midwife, OB, or paediatrician.
Recommendation

Use the output as a structured summary, not as medical advice; contact a qualified clinician for urgent symptoms, uncertainty, or abnormal results.