Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Track
v1.0.0Habit, goal, and progress tracking system with visual progress and accountability. Use when user mentions tracking habits, goals, progress, streaks, or accou...
⭐ 0· 258·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The name/description (habit/goal tracking, visualization, reminders) matches the included track_habit.py which logs habit entries locally. However the SKILL.md promises multiple other scripts (update_goal.py, view_trends.py, check_streaks.py, create_habit.py, set_goal.py, export_data.py) and reference files (references/*.md) that are not present. The single script can legitimately support basic logging, but the larger advertised feature set is not implemented here.
Instruction Scope
Runtime instructions reference multiple scripts and a storage location 'memory/track/' while the included script writes to ~/.openclaw/workspace/memory/track. The instructions do not direct reading of unrelated files or network calls, but they assume many scripts and reference docs that are missing — this is scope creep and makes the runtime behavior unclear.
Install Mechanism
No install spec — instruction-only with one bundled script. Nothing is downloaded or written to system locations beyond creating a directory in the user's home; this is low-risk from an install perspective.
Credentials
No environment variables, no credentials, and the script operates on local files only. Requested permissions are proportional to a local habit-logging tool. The script writes to a path under the user's home (~/.openclaw/workspace/memory/track).
Persistence & Privilege
Skill is not marked always:true, does not modify other skills, and contains no autonomous persistence mechanisms. It simply creates and writes JSON files to a local directory.
What to consider before installing
This package appears to implement only a basic local habit-logging script while advertising a much larger tracking system. Before installing: (1) ask the publisher for the missing scripts and reference files (view_trends.py, update_goal.py, check_streaks.py, etc.) and review them for network calls or credential use; (2) confirm you are comfortable with data being stored under ~/.openclaw/workspace/memory/track (hidden folder in your home) or change the path to a location you control; (3) inspect any future versions for added install steps or downloads — adding external dependencies is where risk usually appears; (4) if you only need simple local logging, this single script looks harmless, but do not install or enable it expecting full goal/visualization features until the other components are provided and reviewed.Like a lobster shell, security has layers — review code before you run it.
accountabilityvk9737yfw0w915bekyqdx1t9h9s82mfa1goalsvk9737yfw0w915bekyqdx1t9h9s82mfa1habitsvk9737yfw0w915bekyqdx1t9h9s82mfa1latestvk9737yfw0w915bekyqdx1t9h9s82mfa1progressvk9737yfw0w915bekyqdx1t9h9s82mfa1trackvk9737yfw0w915bekyqdx1t9h9s82mfa1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.