← Back to Skills Marketplace
Nutrition Tracker
by
abstract-sum
· GitHub ↗
· v0.1.0
416
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install nutrition-tracker
Description
Track daily calories and macros in Obsidian, with profile initialization (sex/height/weight/goal) and goal-based target checks. Includes i18n (zh-CN/en-US)....
Usage Guidance
This skill appears to do exactly what it says: run the provided scripts to store a nutrition profile and log meals inside an Obsidian vault. Before installing or running it: (1) review the included scripts (they are short and bundled) — they operate locally and do not make network requests; (2) back up your Obsidian vault or set OBSIDIAN_VAULT to a test directory to avoid unintended modifications; (3) be aware the scripts will create/overwrite health/eat/profile.json and a monthly markdown file in the chosen vault; and (4) if you need stricter isolation, run the scripts in a sandbox or on a test vault first.
Capability Analysis
Type: OpenClaw Skill
Name: nutrition-tracker
Version: 0.1.0
The skill contains a code injection vulnerability in `scripts/nutrition_init.sh`, where shell variables (like `--sex` or `--height`) are directly interpolated into an unquoted Python heredoc. This allows for arbitrary Python code execution if the input is maliciously crafted. While this is a significant security flaw, the skill's overall logic is consistent with its stated purpose of nutrition tracking in Obsidian, and there is no evidence of intentional data exfiltration, backdoors, or malicious intent.
Capability Assessment
Purpose & Capability
The scripts create/read/write a profile.json and monthly markdown files inside an Obsidian vault (default: ~/Documents/obsidian/yzhai-daily) and compute macro/ calorie targets. The requested files, commands, and behavior line up with the 'Nutrition Tracker' description; there are no unrelated services, credentials, or binaries required.
Instruction Scope
The runtime instructions tell the agent to run bundled shell/Python scripts that will modify files in the user's Obsidian vault (create directories, write profile.json, update monthly .md logs). This is expected for the stated purpose, but be aware the skill will write to your filesystem (the default vault or whatever OBSIDIAN_VAULT you set). There are no network calls or attempts to read unrelated system files. If you want to be cautious, back up your vault or point OBSIDIAN_VAULT at a test directory before use.
Install Mechanism
There is no install specification (instruction-only). All code is included in the skill bundle (scripts and locales); nothing is downloaded or installed from external URLs.
Credentials
The skill requires no credentials or secret environment variables. It optionally respects OBSIDIAN_VAULT if present to choose the storage path; otherwise it uses a sensible default. No broad credential access is requested.
Persistence & Privilege
always is false and the skill is user-invocable only. It does not attempt to modify other skills or system-wide settings; its persistent effect is limited to creating/updating files in the vault (its own data).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nutrition-tracker - After installation, invoke the skill by name or use
/nutrition-tracker - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release: Obsidian meal log + profile init + i18n (zh-CN/en-US) + target check.
Metadata
Frequently Asked Questions
What is Nutrition Tracker?
Track daily calories and macros in Obsidian, with profile initialization (sex/height/weight/goal) and goal-based target checks. Includes i18n (zh-CN/en-US).... It is an AI Agent Skill for Claude Code / OpenClaw, with 416 downloads so far.
How do I install Nutrition Tracker?
Run "/install nutrition-tracker" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Nutrition Tracker free?
Yes, Nutrition Tracker is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Nutrition Tracker support?
Nutrition Tracker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Nutrition Tracker?
It is built and maintained by abstract-sum (@abstract-sum); the current version is v0.1.0.
More Skills