ClawHub

Habit Tracker

v1.0.0

Build habits with streaks, reminders, and progress visualization

⭐ 1· 4.4k·62 current·63 all-time
by@jhillin8
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
Name, description, and SKILL.md all describe habit creation, logging, streaks, and reminders — there are no unrelated permissions, env vars, or binaries requested. However the doc claims "sends optional reminders" and "All data stored locally" without specifying how reminders are delivered or where local data is persisted, which is an implementation gap rather than an explicit mismatch.
ℹ
Instruction Scope
The instructions stay on-topic (create/log/check habits, set reminders, view progress). They do not instruct reading arbitrary files, environment variables, or contacting external endpoints. They are vague about persistence and scheduling: no paths, no storage API, and no mechanism for delivering scheduled reminders are described, which leaves unspecified runtime behavior that could rely on platform features.
✓
Install Mechanism
Instruction-only skill with no install spec or code files — lowest-risk install footprint.
✓
Credentials
The skill declares no environment variables, credentials, or config paths; this is proportionate for the claimed functionality.
ℹ
Persistence & Privilege
always:false and no extra privileges requested. The SKILL.md states data is stored locally but gives no storage location or persistence guarantees — ask how/where data is persisted and whether it survives agent restarts or is shared across devices.
Assessment
This skill appears low-risk and coherent for a simple habit tracker because it requests no credentials or installs. Before installing, ask the publisher (or the platform) how reminders are implemented (in-app messages, platform notifications, scheduled tasks, or external services?) and where "local" data will be stored and for how long. Because the source/homepage is unknown, consider testing with non-sensitive dummy habits first and confirm whether data persists across sessions and whether the assistant needs any notification permissions on your device.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fgafga6k80x401s06x88ess7zxtmx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments