Fasting Tracker
v1.0.0Track intermittent fasting windows, extended fasts, and autophagy milestones
⭐ 1· 1.9k·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description promise real-time background tracking, scheduled reminders, notifications, and local storage of fasting logs. However, the package is instruction-only with no code, no install steps, no declared access to notifications, and no file/storage paths. The capability set described is not supported by the artifacts provided.
Instruction Scope
SKILL.md uses vague, operational language ('Sets background tracking', 'runs even when you close the app', 'daily reminders', 'alerts') but gives no concrete instructions on how to schedule background tasks, where to persist logs, or how to send notifications. That vagueness grants the agent broad discretion and could lead it to attempt system-level actions (cron jobs, notification APIs, writing to arbitrary paths) without clear constraints.
Install Mechanism
No install spec and no code files are present, so nothing will be written to disk or downloaded during install. This is lower-risk from an installation perspective, but also means promised persistent features cannot be implemented as-is.
Credentials
The skill declares no environment variables or credentials (proportionate). However, it claims 'All data stays local' without specifying storage locations or access requirements — that claim cannot be validated from the provided materials.
Persistence & Privilege
Although the registry flags do not request 'always' or elevated privileges, the instructions imply persistent background operation and notifications. Without explicit implementation details, the agent would need to create persistent system artifacts (scheduled tasks, background services, or files) to fulfill that promise — a mismatch that merits caution.
What to consider before installing
This skill appears internally inconsistent: it promises background timers, notifications, and local storage but provides no code, install steps, or declared permissions to implement them. Before installing or enabling it: (1) ask the author how background tracking and notifications are implemented and where logs are stored; (2) require explicit instructions about any system changes (cron jobs, services, notification APIs) and the exact file paths used; (3) prefer a version that includes an install spec or code you can review, or run the skill in a restricted/sandboxed environment; (4) do not grant system-level scheduling or file-access permissions to the agent unless you understand and approve the exact actions it will take.Like a lobster shell, security has layers — review code before you run it.
latestvk9799vxjwrk6nyzshw7dzqth6d7zxcvt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.