Plant Tracker
PassAudited by ClawScan on May 1, 2026.
Overview
Plant Tracker appears to be a coherent local plant-record tool with expected local storage and user-requested exports, and no evidence of credential use, networking, or hidden behavior.
This skill looks safe for its stated purpose. Before installing, be aware that it keeps your plant records locally and can export them to a file you choose; avoid entering sensitive personal details in notes or exporting over important files.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If asked to export, the tool can create or overwrite a local file in allowed directories.
The export command can create directories and write a markdown export file to a user-provided path after path validation.
output_path.parent.mkdir(parents=True, exist_ok=True) ... output_path.write_text(md)
Use export only with an intended filename and avoid pointing it at existing personal or configuration files.
Personal garden details and notes remain on disk and may be shown later through list, show, search, or export commands.
The skill intentionally keeps a persistent local record of plant data, including locations and care notes.
All plant data is stored in: `~/.openclaw/workspace/plants_db.json`
Do not store information in plant notes that you would not want retained locally or included in exports.