Blood Sugar Tracker
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may not know why a network-capable command-line tool is listed as required.
The package metadata declares curl, a network-capable binary, but the provided README/SKILL instructions do not explain any curl use and no code is present. This is an inconsistency/provenance note, not evidence of malicious behavior.
"requires":{"bins":["curl"]}Ask the publisher to remove the curl requirement if unnecessary or document exactly why it is needed.
Blood sugar readings are personal health information; users should know where they are stored and who can access them.
The skill asks users to log blood glucose readings and later view trends, implying sensitive health data may be stored or reused, but the artifacts do not describe storage, retention, or deletion controls.
clawhub sugar log --value 5.5 --time "before_meal"
Only enter health data if you are comfortable with the storage model, and ask the publisher to document retention, export, and deletion behavior.