Fitness & Workout Manager
ReviewAudited by ClawScan on May 10, 2026.
Overview
This fitness skill appears purpose-aligned, but users should understand it stores workout history locally and can sync health-related logs to Feishu using bot/document permissions.
This skill looks coherent for fitness tracking. Before installing, decide whether you are comfortable storing workout and health-adjacent notes under the OpenClaw workspace and, if using Feishu sync, make sure the configured document and bot permissions are limited to what you intend.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may operate through a Feishu bot with permissions that affect messages and cloud documents.
The skill discloses that the bound Feishu/OpenClaw bot needs message read/write and cloud document management permissions.
需为 Open Claw 绑定的机器人开通消息读写与云文档管理权限
Use the least-privileged Feishu bot/app permissions available and restrict access to the intended fitness document or workspace area.
Personal workout notes, goals, constraints, and summaries may be copied to Feishu cloud storage.
Workout plans and logs can be sent from the local skill into a Feishu cloud document when the Feishu document ID is configured.
Set `FEISHU_FITNESS_DOC_ID` to enable plan/log sync to a Feishu doc ... `sync_log_to_feishu(days=30)` — push log report Markdown
Enable Feishu sync only for a trusted document, review that document's sharing settings, and avoid logging sensitive medical details unless you are comfortable storing them there.
Workout history and personal fitness preferences remain on disk and may be reused in later summaries or exports.
The skill persistently stores user fitness data and live-session state in local OpenClaw workspace files.
Plan: `~/.openclaw/workspace/fitness-skill/plan.json` ... Log: `~/.openclaw/workspace/fitness-skill/log.json` ... Active session: `~/.openclaw/workspace/fitness-skill/active_session.json`
Treat the workspace files as personal data; delete or back them up intentionally, and avoid entering information you do not want retained.
The assistant may close forgotten workout sessions or send reminders after the initial setup.
The skill documents scheduled reminders and automatic stale-session closing, which are persistent/autonomous behaviors but are disclosed and aligned with workout tracking.
Heartbeat detects stale session | HEARTBEAT.md rule runs `fitness-log end` to force-close ... Daily reminders via `scheduler.add_cron_job()`
Confirm reminder times and session behavior match your expectations, and disable or avoid configuring reminders if you do not want background follow-ups.