Bmi Tracker
AdvisoryAudited by VirusTotal on Apr 22, 2026.
Overview
Type: OpenClaw Skill Name: bmi-tracker Version: 1.0.0 The skill bundle contains only metadata and documentation for a BMI tracking utility. There is no executable code provided, and the instructions in SKILL.md and README.md are consistent with the stated purpose of health assessment and history tracking. No indicators of data exfiltration, malicious execution, or prompt injection were found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your weight and BMI history could be treated as stored personal health-related information if the feature is implemented by the agent or platform.
The skill advertises history and goal tracking, which may involve retaining height, weight, BMI, or target data across uses.
- ✅ 历史记录 - ✅ 目标设定
Use only if you are comfortable entering this information, and confirm where any history is stored and how it can be deleted.
This does not show harmful behavior, but it creates uncertainty about whether the skill expects an extra network-capable command-line tool.
The packaged metadata declares a curl requirement, while the registry requirements say no binaries are required and the skill documentation does not explain curl usage.
"requires":{"bins":["curl"]}The publisher should remove or clearly explain the curl requirement; users can verify that installation does not request or run unexpected tooling.