HabitTracker Conversational Habit Tracking
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
Your habit history is saved locally and could be read by anyone or any process with access to that file.
Why it was flagged
The skill persists habit entries to a local JSON file, which can contain personal routine or health-related information.
Skill content
this.dataFile = options.dataFile || './habits-data.json'; ... fs.writeFileSync(this.dataFile, JSON.stringify(this.entries, null, 2));
Recommendation
Use a dedicated local data file, avoid storing sensitive details you do not want persisted, and keep backups if the habit history matters to you.