healthcheck
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says—track water and sleep locally—but it runs Node.js commands and stores personal health logs in a JSON file.
This looks safe for a simple local tracker. Before installing, confirm you are comfortable with the agent running Node.js snippets and storing sleep and water logs in `{baseDir}/health-data.json`.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may fail if Node.js is unavailable, and its commands will modify the local health-data JSON file when invoked.
The skill instructs the agent to run inline Node.js commands to read and modify the local health data file. This is purpose-aligned, but it is still local command execution and Node.js is not declared as a required binary in the metadata.
node -e "const fs=require('fs');const f='{baseDir}/health-data.json';...fs.writeFileSync(f,JSON.stringify(d))"Install only if you are comfortable with local Node.js command execution, and keep the data file in a directory you control.
Anyone with access to the storage location could view or modify your water and sleep history.
The skill persistently stores water and sleep timestamps, which may reveal personal health or routine information even though it is local and disclosed.
File: `{baseDir}/health-data.json` ... "water": [{"time": "ISO8601", "cups": 2}], "sleep": [{"time": "ISO8601", "action": "sleep|wake"}]Store the file in a private location, consider backups or deletion policies, and avoid sharing the file unless intended.