Gratitude Tracker

感恩追踪 - 感恩日记、积极心态、幸福感提升

Security Scan

The skill appears to do what its description says (a gratitude-journal helper) but contains internal inconsistencies about required tools/install and omits details about cloud sync and where data goes, so proceed with caution.

Purpose & Capability

The SKILL.md instructs use of a 'clawhub' CLI (clawhub gratitude ...), and the README shows installation via 'npx clawhub@latest install gratitude-tracker', but the registry metadata at the top claims no required binaries and the included _meta.json lists only ['curl']. These mismatches (missing declaration of the 'clawhub' binary and an unexplained 'curl' requirement) are incoherent with the stated, simple journaling purpose.

Instruction Scope

The runtime instructions themselves stay on-topic (add entries, mood rating, review, export). They do instruct running shell CLI commands (clawhub ...) which could execute arbitrary actions depending on that binary's implementation. The SKILL.md does not instruct reading unrelated files or environment variables.

Install Mechanism

There is no formal install spec in the registry (instruction-only skill). README suggests installing via 'npx clawhub@latest install gratitude-tracker', but no install instructions are present in the SKILL metadata. This mismatch is a minor risk because it leaves unclear what code would actually be installed and from where.

Credentials

No environment variables, credentials, or config paths are requested. However, the product mentions a paid 'cloud sync' tier with no details about endpoints or authentication, which is an informational gap rather than an explicit overreach.

Persistence & Privilege

always is false and the skill is user-invocable; it does not request permanent or elevated platform privileges. As an instruction-only skill it doesn’t install persistent components itself.

What to consider before installing

This skill looks like a simple gratitude-journal helper, but there are inconsistencies you should resolve before installing: 1) SKILL.md expects a 'clawhub' CLI, but the registry metadata doesn't declare that binary — confirm where 'clawhub' comes from and whether it will be installed. 2) _meta.json mentions 'curl' even though the instructions don't use it. 3) The Pro/subscription cloud-sync feature is mentioned but there are no details about the sync endpoint, authentication, or privacy — ask the author for a privacy policy and where data is stored/transmitted. If you don't trust the source (no homepage, unknown owner), avoid installing or run it in an isolated environment; request a clear install spec and source repository before proceeding. If the author provides a trustworthy install URL (e.g., official repo or GitHub release) and documents cloud-sync endpoints and auth, that would raise confidence.

感恩追踪工具，帮你培养积极心态。

功能

• ✅ 感恩日记
• ✅ 积极心态
• ✅ 幸福感提升
• ✅ 回顾功能
• ✅ 统计报告

使用

# 写感恩
clawhub gratitude add --text "今天天气很好"

# 心情记录
clawhub gratitude mood --rating 8

# 回顾
clawhub gratitude review --days 7

# 导出
clawhub gratitude export --format pdf

定价

版本	价格	功能
免费版	¥0	基础功能
Pro 版	¥29	全部功能
订阅版	¥6/月	Pro+ 云同步