Blood Sugar Tracker
AdvisoryAudited by VirusTotal on Apr 22, 2026.
Overview
Type: OpenClaw Skill Name: blood-sugar-tracker Version: 1.0.0 The provided files (SKILL.md, README.md, and _meta.json) contain only documentation and metadata for a blood sugar tracking tool. There is no executable code, suspicious network activity, or prompt-injection attempts identified; the content is entirely consistent with the stated purpose of logging and analyzing health data.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may not know why a network-capable command-line tool is listed as required.
The package metadata declares curl, a network-capable binary, but the provided README/SKILL instructions do not explain any curl use and no code is present. This is an inconsistency/provenance note, not evidence of malicious behavior.
"requires":{"bins":["curl"]}Ask the publisher to remove the curl requirement if unnecessary or document exactly why it is needed.
Blood sugar readings are personal health information; users should know where they are stored and who can access them.
The skill asks users to log blood glucose readings and later view trends, implying sensitive health data may be stored or reused, but the artifacts do not describe storage, retention, or deletion controls.
clawhub sugar log --value 5.5 --time "before_meal"
Only enter health data if you are comfortable with the storage model, and ask the publisher to document retention, export, and deletion behavior.