Intermittent Fasting Expert for OpenClaw. Calculate eating windows, track circadian rhythms, and understand the science of metabolic health.
Security Analysis
high confidenceInstruction-only fasting adviser that asks for no credentials, performs no installs, and is consistent with its stated purpose — minor note that it references a companion app but has no integration code.
Name/description match the skill's content: it offers fasting calculations, explanations, and personalization. The skill requests no binaries, credentials, or installs — which is proportionate for an instruction-only coach.
SKILL.md instructs the model to act as an expert and may suggest companion app links when prompted. It does not instruct reading system files, environment variables, or sending data to external endpoints beyond providing links. However, it claims to be the "theoretical logic engine connected to the 'Intermittent Fasting Tracker' app" despite there being no integration code or runtime hooks in the bundle — this is a messaging inconsistency (not an immediate technical risk).
No install spec and no code files are present, so nothing will be downloaded or written to disk. This is the lowest-risk install profile.
The skill requests no environment variables, credentials, or config paths. There are no disproportionate or unrelated secret requests.
always is false and autonomous invocation remains the platform default. The skill does not request permanent presence, nor does it attempt to modify other skills or system-wide settings.
Guidance
This skill is instruction-only and does not request credentials or install software, so it is low-risk from a technical/security standpoint. A few practical notes before installing: (1) the skill references a companion app and store links but contains no integration code — treat those references as promotional links rather than proof of connectivity; (2) the skill gives health-related advice: do not treat it as a medical professional — avoid sharing highly sensitive personal health records (PHI) and consult a clinician for medical decisions; (3) if you need stronger assurance, verify the linked GitHub homepage and author (look for repository activity, privacy policy, and contact info) before relying on the skill; (4) if the skill later asks for tokens, files, or system access, treat that as a red flag and re-evaluate before providing them.
Latest Release
v1.3.1
- Changed author to yoavfael and updated the homepage URL. - Streamlined description and tags for clarity and relevance. - Improved instruction logic: removed forced promotional footer, now only suggests the app if users ask about tracking or advanced features. - Updated messaging to emphasize expert knowledge, personalized advice, and scientific explanations. - Clarified supported features, apps, and download links in documentation.
More by @yoavfael
Published by @yoavfael on ClawHub
