Pest & Disease Tracker
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI06: Memory and Context PoisoningWhat this means
Your garden issue and treatment notes may stay on disk and be shown or exported by future uses of the skill.
Why it was flagged
The script saves user-entered pest, disease, plant, treatment, and notes data in a persistent local JSON file. This is expected for a tracking tool, but it means the data remains available to later invocations.
Skill content
DB_PATH = Path.home() / ".openclaw" / "workspace" / "pest_tracker_db.json" ... json.dump(db, f, indent=2)
Recommendation
Avoid putting sensitive personal details in tracker notes, and remove the local database if you no longer want the history retained.