Bmi Tracker

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your weight and BMI history could be treated as stored personal health-related information if the feature is implemented by the agent or platform.

Why it was flagged

The skill advertises history and goal tracking, which may involve retaining height, weight, BMI, or target data across uses.

Skill content
- ✅ 历史记录
- ✅ 目标设定
Recommendation

Use only if you are comfortable entering this information, and confirm where any history is stored and how it can be deleted.

What this means

This does not show harmful behavior, but it creates uncertainty about whether the skill expects an extra network-capable command-line tool.

Why it was flagged

The packaged metadata declares a curl requirement, while the registry requirements say no binaries are required and the skill documentation does not explain curl usage.

Skill content
"requires":{"bins":["curl"]}
Recommendation

The publisher should remove or clearly explain the curl requirement; users can verify that installation does not request or run unexpected tooling.