food-expiry-reminder

PassAudited by ClawScan on May 1, 2026.

Overview

This looks like a local food-expiry tracker with no network or credential behavior, but it writes a local inventory file and optionally can be scheduled to run daily.

This skill appears safe for its stated purpose. Before installing, note that it stores food inventory locally in data/food_data.json, ships with sample records you may want to clear, and should only be scheduled with cron or HEARTBEAT if you intentionally want ongoing reminders.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users have less context about who maintains the skill or where to verify updates.

Why it was flagged

The registry metadata does not provide upstream source or homepage provenance; no remote installer or dependencies are shown, but the origin is not documented.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included scripts before use and prefer installing from a source you trust.

What this means

Using the add command changes the local food inventory file.

Why it was flagged

The add script writes user-supplied food records to the skill's local JSON file; this is purpose-aligned and scoped to the skill data directory.

Skill content
data['foods'].append(food_item) ... with open(data_file, 'w', encoding='utf-8') as f: json.dump(data, f, ensure_ascii=False, indent=2)
Recommendation

Only run add/edit actions for records you intend to store, and back up the JSON file if the inventory matters.

What this means

The skill may show reminders for preloaded sample items, and future food notes will persist locally.

Why it was flagged

The skill package includes persistent food records that scripts will read as inventory data unless the user clears or replaces them.

Skill content
"foods": [ { "id": "a3bd5788", "name": "牛奶", ... } ]
Recommendation

Clear or reinitialize data/food_data.json before personal use if you do not want the bundled sample records.

What this means

If you add the cron entry, the reminder script will keep running daily until you remove it.

Why it was flagged

The documentation suggests an optional cron job for daily reminders; this is user-directed, but it creates recurring behavior if configured.

Skill content
0 9 * * * cd /path/to/skills/food-expiry-reminder && python scripts/get_reminders.py
Recommendation

Only set up scheduled reminders if you want persistent daily checks, and keep track of how to remove the cron entry.