Health Data AI Analyzer

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent and read-only, but it will handle sensitive Apple Health data from a local Mac app or a user-pasted JSON response.

This looks appropriate for a local Apple Health daily brief. Before installing, confirm you trust the Health Data AI Analyzer Mac app providing the localhost API and remember that any curl fallback response or generated summary may contain private health information.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your health metrics may be visible in the conversation while the brief is generated.

Why it was flagged

The skill may read or receive Apple Health daily-brief data, which is sensitive personal data that will be used in the agent's working context. The artifact also scopes this to the minimum local endpoint and prohibits external sharing.

Skill content
Preferred source of truth: `http://127.0.0.1:8765/openclaw/daily-brief?date=YYYY-MM-DD` ... `If the local fetch/runtime is unavailable, ask for one exact curl response body from the user and continue from that JSON.`
Recommendation

Use it only with the trusted local Mac app, provide only the exact requested response if fallback is needed, and avoid sharing the resulting chat if it contains private health information.