Testosterone Optimization
v1.0.0Optimize natural testosterone with sleep, exercise, nutrition, and lifestyle tracking
⭐ 1· 1.9k·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, and SKILL.md align: the skill is an evidence-based lifestyle tracking/helper for testosterone optimization and does not request unrelated binaries, environment variables, or system paths.
Instruction Scope
Instructions ask the agent to collect and correlate sensitive personal health data (sleep, libido, erections, body‑fat estimates, supplement intake) and assert that "All data stays local on your machine," but the SKILL.md contains no mechanism for local storage, file paths, or persistence across sessions. That gap is a concrete ambiguity: the skill could either be ephemeral (memory only) or silently rely on platform storage or other unstated storage — the document does not make this explicit.
Install Mechanism
No install spec or code files are present (instruction-only). This is the lowest install risk: nothing will be written to disk by the skill itself during an installation step.
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, it intends to collect sensitive health and symptom data from the user — a privacy consideration that is separate from environment/credential access and should be evaluated by the user before sharing personal health details.
Persistence & Privilege
The skill is not force-enabled (always: false) and uses normal model invocation. That is appropriate. The outstanding question is whether and how the skill persists logs locally between sessions; the SKILL.md promises local-only storage but provides no specification of where or how data is stored or whether the platform will retain it. This ambiguity affects privacy but is not an explicit privilege escalation.
What to consider before installing
The skill appears to do what it says and asks for no credentials or installs, but take these precautions before installing or using it: 1) Ask the publisher (or the platform) how and where data is stored and persisted — the SKILL.md claims "all data stays local" but gives no mechanism or file paths. 2) If you value privacy, avoid entering highly sensitive details (e.g., sexual symptoms, clinical diagnoses) until you verify storage behavior and retention. 3) Consider disabling autonomous invocation for a skill that collects health data so it cannot run without your explicit prompt. 4) This skill provides health/supplement dosing guidance (vitamin D, zinc, body‑fat targets); treat that as general information and consult a healthcare professional before changing medications or supplement regimens. 5) Note the source is unknown and there is no homepage; prefer skills with identifiable authorship and a privacy/persistence policy. If the publisher can supply details on local storage format/paths and whether data ever leaves the device, your confidence in this skill would increase.Like a lobster shell, security has layers — review code before you run it.
latestvk974qa25kj9wjpsx3qfsh2h1057zwfew
License
MIT-0
Free to use, modify, and redistribute. No attribution required.