Bmi Tracker
PassAudited by ClawScan on May 10, 2026.
Overview
This appears to be a simple instruction-only BMI helper with no code, credentials, or install-time execution, though users should notice that it references health history tracking and has a minor metadata inconsistency.
This skill looks low risk and instruction-only. Before using history or goal tracking, consider where your height, weight, BMI, and target data may be stored, and be aware that the package metadata mentions curl even though the registry says no binary dependencies are required.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your weight and BMI history could be treated as stored personal health-related information if the feature is implemented by the agent or platform.
The skill advertises history and goal tracking, which may involve retaining height, weight, BMI, or target data across uses.
- ✅ 历史记录 - ✅ 目标设定
Use only if you are comfortable entering this information, and confirm where any history is stored and how it can be deleted.
This does not show harmful behavior, but it creates uncertainty about whether the skill expects an extra network-capable command-line tool.
The packaged metadata declares a curl requirement, while the registry requirements say no binaries are required and the skill documentation does not explain curl usage.
"requires":{"bins":["curl"]}The publisher should remove or clearly explain the curl requirement; users can verify that installation does not request or run unexpected tooling.