Muscle Gain
v1.0.0Track muscle building with weight progression, protein tracking, and strength milestones
⭐ 1· 1.9k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (muscle tracking, protein, lifts, photos) matches the requested footprint: there are no credentials, binaries, or installs required. However, features that imply persistent, automated data processing (auto-calculated protein, milestone surfacing, charts, encrypted local storage) require state and code; the skill package provides no implementation or config paths to do that.
Instruction Scope
SKILL.md gives usage semantics and privacy claims ("All data stays local on your machine — encrypted and stored offline") but contains no runtime instructions or commands for how to collect/store/process data. It neither specifies file paths, formats, or encryption mechanisms nor indicates how progress photos are kept locally. That ambiguity means the agent or downstream tooling would need to decide how to persist or transmit data, which could lead to unintended cloud uploads or unclear handling of images.
Install Mechanism
No install spec and no code files are present, which minimizes risk from downloads or executes. Because nothing is installed, there's no install-time supply-chain risk in the package itself.
Credentials
The skill requests no environment variables, credentials, or config paths — good for proportionality. However, its strong privacy claim (encrypted local storage, no cloud) is unverifiable given the lack of implementation details; users should not assume the platform or agent will enforce this.
Persistence & Privilege
always is false and the skill does not request persistent agent-level privileges or modify other skills. It relies on the agent to run when invoked, which is appropriate for this type of skill.
What to consider before installing
This skill is an instruction-only description of a muscle-tracking assistant; it contains no code or install steps. Before installing or trusting it with photos and personal data, ask the publisher or maintainer how data will actually be stored and encrypted (file paths, formats, encryption algorithm, key management, and backups). If you rely on the promise "all data stays local," require concrete details or prefer a skill that provides code or a local client you can inspect. Be cautious about uploading progress photos or sensitive health data until you confirm where the agent will store them and whether any external services are contacted. If you decide to proceed, test with dummy data first and monitor agent activity or logs for any unexpected network calls.Like a lobster shell, security has layers — review code before you run it.
latestvk979fm16f3wbxqygnbahty05td7zx2zg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.