Symptom
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a local symptom-tracking helper, but it persistently stores sensitive health entries on disk and its CLI installation path is not clearly declared.
This skill looks suitable for local symptom tracking. Before installing, be aware that health entries are stored persistently under `~/.local/share/symptom`; protect that folder if your device is shared or backed up to cloud storage, and verify how the `symptom` CLI is installed because the registry does not declare an install step.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Health details you log can remain on your computer in local text files and may be searched or exported later.
The script persistently stores timestamped symptom/activity entries in a local directory.
DATA_DIR="${HOME}/.local/share/symptom" ... _log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }Only log information you are comfortable storing locally; protect, back up, or delete `~/.local/share/symptom` as appropriate.
The command may not be installed by the registry, and any manual script installation would rely on the user trusting the included source.
This is notable because the SKILL.md examples assume a `symptom` command and the manifest includes `scripts/script.sh`, so the CLI installation/provenance path is not fully declared.
No install spec — this is an instruction-only skill.
Install or run the CLI only from the stated source, review the script before use, and avoid running it with elevated privileges.