FitClaw Public Core

Public-safe FitClaw coaching workflow covering onboarding, hydration, nutrition, and training structure. Use when demonstrating a reusable AI fitness coachin...

Security Scan

The skill is an instruction-only, public-safe packaging of FitClaw coaching workflows and its declared requirements, instructions, and scope are internally consistent with that purpose.

Purpose & Capability

Name and description match the provided content: onboarding, hydration, nutrition, and training workflows. The skill requires no binaries, environment variables, installs, or config paths — which is appropriate for an instruction-only, public-safe packaging layer.

Instruction Scope

SKILL.md and the referenced module files stick to coaching workflows, guardrails, memory guidance, and a sanitization checklist. The instructions explicitly forbid including credentials, private user media, and private operational materials. There are no directives to read arbitrary system files, contact unknown endpoints, or exfiltrate data.

Install Mechanism

No install specification and no code files — lowest-risk pattern. Nothing is downloaded, extracted, or written to disk by the skill itself.

Credentials

The skill requests no environment variables, credentials, or config paths. The memory/storage guidance is generic and emphasizes public-safe handling; this is proportionate for a workflow-only skill.

Persistence & Privilege

always is false and the skill does not request persistent system presence or modification of other skills or system-wide settings. Autonomous invocation by the agent is allowed (platform default) but the skill does not request elevated privileges.

Assessment

This package appears coherent and low-risk as provided. Before publishing or deploying, manually follow the included 'public sanitization checklist': review examples and templates to ensure no private data or operational bindings slipped in; confirm any reminders/notifications you wire into a runtime use explicitly provisioned credentials and are limited to the expected service; and if you add runtime memory/storage or external integrations later, re-evaluate credentials and endpoints to ensure they match the skill's public scope. If you want higher assurance, have a reviewer verify that example data is anonymized and that no hidden endpoints or external call patterns were introduced when adapting this into a runnable skill.

Purpose

This is the public-safe packaging layer for FitClaw.

It is not the live production workspace. Its purpose is to expose the reusable coaching workflow only.

---

Release Gate

This package is review-first.

That means:

1. prepare the candidate package locally,
2. review it carefully,
3. publish only after explicit approval.

Without explicit approval, this package should remain in staging only.

---

Included public workflow scope

This package currently focuses on four reusable workflow blocks:

1. onboarding
2. hydration support
3. nutrition guidance
4. training framework guidance

---

Hard boundary

Never treat this package as a dump of the live FitClaw project.

Only include:

• reusable workflow logic
• public-safe templates
• generalized examples
• sanitized references

Never include:

• credential files
• private user media
• private user reports or history
• private runtime bindings
• private operational materials embedded in scripts or examples

---

Packaging rule

If this package is prepared for ClawHub, it must pass privacy review first. The public asset is the method, not the real operating state.

---

Current candidate modules

• fitclaw-onboarding-public
• fitclaw-hydration-public
• fitclaw-nutrition-public
• fitclaw-training-public

These modules were rewritten into public-safe references before publish.

---

Output goal

A publishable public-safe skill package that demonstrates the FitClaw coaching method without leaking private or operational data.