Quit Weed
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: quit-weed Version: 1.0.0 The provided skill bundle contains only metadata (`_meta.json`) and a markdown description (`SKILL.md`). Both files are benign, describing a self-help skill for quitting cannabis. There is no executable code, no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts against the AI agent. The `SKILL.md` explicitly states that 'All data stays local on your machine', reinforcing a benign intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your cannabis-use goals, streak, and craving patterns may be saved and referenced later, which could expose private information if your device or agent profile is shared.
The skill is designed to persist and reuse substance-use progress, goals, and craving context. That is purpose-aligned, but it is sensitive personal information.
"Streak Tracking" - Maintain a persistent counter of days without use ... "Progress Tracking" - Daily check-ins ... "Track cravings ... Note when cravings hit"
Only record details you are comfortable storing, and consider asking how to view, edit, or delete the saved streak and craving data.
Users may rely on a broad privacy promise without knowing exactly where their sensitive tracking data is stored or how to remove it.
The privacy assurance is prominent and reassuring, but the artifact does not specify storage path, retention, deletion controls, or how local-only handling is enforced.
"All data stays local on your machine" ... "Complete privacy, always."
Treat the privacy claim as a useful intention, but verify platform storage and deletion controls before recording highly personal information.