HabitTracker Conversational Habit Tracking
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: habit-tracker-sr Version: 1.0.0 The HabitTracker skill is a standard utility for logging daily activities and calculating streaks. The implementation in `src/habit-tracker.js` is straightforward, using local file storage (`habits-data.json`) with no network activity, shell execution, or sensitive data access. Notably, the code includes a security check against prototype pollution in the `log` function, and the documentation in `SKILL.md` contains no malicious prompt injection or hidden instructions.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your habit history is saved locally and could be read by anyone or any process with access to that file.
The skill persists habit entries to a local JSON file, which can contain personal routine or health-related information.
this.dataFile = options.dataFile || './habits-data.json'; ... fs.writeFileSync(this.dataFile, JSON.stringify(this.entries, null, 2));
Use a dedicated local data file, avoid storing sensitive details you do not want persisted, and keep backups if the habit history matters to you.