Goal Tracker Pro

目标追踪专业版 - 目标设定、进度追踪、里程碑庆祝

Security Scan

The skill's files and instructions mostly match a simple goal-tracking tool, but multiple metadata/instruction inconsistencies (undeclared required CLI, contradictory meta info, and an npx install hint) make its runtime behavior unclear and warrant caution.

Purpose & Capability

SKILL.md describes a goal-tracking CLI (clawhub) and features like social sharing and data analysis which are coherent with the name. However the skill does not declare the clawhub binary as required even though all runtime examples call it. _meta.json lists 'curl' as a required binary (which the instructions never use). The mismatch between declared requirements and actual runtime commands is inconsistent.

Instruction Scope

Runtime instructions are short and scoped to setting/updating/viewing goals via 'clawhub' commands — they do not ask the agent to read unrelated files or environment variables. But they assume the presence of an external CLI ('clawhub') and mention social sharing/data analysis without specifying endpoints or what data is shared, leaving important behavior unspecified.

Install Mechanism

There is no formal install spec, but README suggests running 'npx clawhub@latest install goal-tracker-pro', which would download and execute remote code at runtime. That implies network installs via npm that are not declared elsewhere. _meta.json's 'requires' entry (curl) also contradicts the declared registry requirements. The lack of a clear, trusted install source increases risk.

Credentials

The skill does not request any environment variables or credentials, which is proportionate for a local goal tracker. However the README's npx install implies code download that could subsequently request credentials or external network access at runtime — this is not described or limited by the SKILL.md.

Persistence & Privilege

The skill does not request always:true and is user-invocable only; there is no indication it will persistently enable itself or modify other skills. This is appropriate and low-privilege.

What to consider before installing

This skill appears to be a simple goal-tracker, but there are inconsistencies you should resolve before installing: (1) SKILL.md runs a 'clawhub' CLI but that binary is not declared — ask where 'clawhub' comes from and inspect it before running. (2) README suggests installing via 'npx', which will download and execute remote code — only run that if you trust the package owner. (3) _meta.json lists 'curl', which the instructions never use; the conflicting metadata suggests sloppy packaging. Ask the publisher for a homepage/source repo, full install instructions, and the provenance of the 'clawhub' tool; review the downloaded package contents (or avoid npx installs) if you have sensitive data or limited trust in the author.

目标追踪专业版工具，帮你实现人生目标。

功能

• ✅ 目标设定
• ✅ 进度追踪
• ✅ 里程碑庆祝
• ✅ 数据分析
• ✅ 社交分享

使用

# 设定目标
clawhub goal set --title "减肥 10 斤" --deadline "2026-06-01"

# 更新进度
clawhub goal update --id 1 --progress 50

# 查看进度
clawhub goal progress --id 1

# 里程碑
clawhub goal milestone --id 1 --name "完成 50%"

定价

版本	价格	功能
免费版	¥0	3 个目标
Pro 版	¥49	无限目标
订阅版	¥12/月	Pro+ AI 建议