🍎 Calorie Tracker — 卡路里追踪
v1.0.21智能健康管理工具，拍照识别食物与运动，自动分析营养热量，安全加密存储，支持多维度数据管理与趋势洞察，助你科学饮食健身。
0· 397·1 当前·1 累计
by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This is an instruction-only calorie-tracking skill that sends user food/exercise/weight data (and any image URLs you provide) to external endpoints at us.guangxiankeji.com / cn.guangxiankeji.com and authenticates via email+verification code to obtain a Bearer token valid for 7 days. Before installing or using it: verify the service's legitimacy and privacy policy at the homepage; avoid uploading sensitive images or personal identifiers until you trust the service; consider using a test/dedicated...详细分析 ▾
✓ 用途与能力
Name/description (food/exercise/weight tracking and storage) match the SKILL.md and module docs: all modules describe food/exercise/weight analysis and calls to a remote API (us.guangxiankeji.com / cn.guangxiankeji.com). There are no unrelated env vars, binaries, or config paths requested.
ℹ 指令范围
Instructions remain within the stated purpose (analyze inputs, call food/exercise/weight analysis APIs, and persist records). They explicitly require user confirmation before persisting data, but also allow persistent consent to skip repeated confirmations. The agent is directed to fetch API specs and to upload/use publicly accessible image URLs — this means user images and health data will be transmitted to the remote service, which is a privacy consideration.
✓ 安装机制
No install step or code files are provided (instruction-only), so nothing is written to disk or downloaded during installation. This lowers local code-execution risk.
ℹ 凭证需求
The skill requests no platform environment variables but relies on a runtime email + verification-code → Bearer token auth flow. Requiring user-supplied email/auth for the service is proportional, but the skill expects agents to store and reuse access tokens (valid 7 days) without prescribing secure storage methods.
ℹ 持久化与权限
always:false and normal autonomous invocation are appropriate. However, the guidance to persist and reuse access tokens for multi-agent/multi-channel consistency increases the window during which the skill can act with the user's token (token valid 7 days). That raises privacy/exposure considerations if the token is stored insecurely or if the agent invokes the skill autonomously.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.212026/3/26
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install calorie-tracker
镜像加速npx clawhub@latest install calorie-tracker --registry https://cn.longxiaskill.com