Health Tracking
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill mostly matches health tracking, but it may put sensitive meal and health records into a #health channel and references helper scripts that are not included for review.
Before installing, confirm where the CSV files will be stored, whether the #health channel is private, and whether you want the agent to post health or meal information there. Also ask for the missing helper scripts or avoid running the documented node commands until their code is available for review.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Meal and health records could become visible to anyone with access to the #health channel, not just the user.
The skill instructs the agent to organize meal records in a #health channel, but does not define the channel audience, privacy boundary, or approval flow for sharing sensitive health-related data.
`#health` チャネルで日付ごとのスレッドを作成し、その日の食事記録をスレッド内にまとめる。
Make channel posting opt-in, confirm the channel is private before use, and ask the user before posting health data outside local CSV files.
Private health details may remain on disk and could be exposed through backups, shared folders, or other local access.
The skill stores sensitive health, nutrition, and photo-reference information in persistent CSV files. This is purpose-aligned, but users should understand that these files become a local health record.
`data/daily.csv`: ts,date,weight_kg,sleep_hours,resting_hr,mood_1to5,notes ... `data/nutrition_meals.csv`: ... description,photo_ref,cal,p,c,f,water,notes
Store the CSVs in a private location, avoid shared or cloud-synced directories unless intended, and add clear deletion or retention guidance.
The documented commands may fail, or users may need to obtain/create scripts whose behavior was not reviewed here.
SKILL.md references helper scripts, while the supplied artifact set says there are no code files and no install spec. The intended implementation is therefore not available for review.
"requires": { "scripts": ["scripts/health_record.js", "scripts/nutrition_append.js"] }Include the referenced scripts in the package or clearly mark the skill as documentation-only; review any added scripts before running them.