Plant Tracker

Manage and track your plants and garden with care schedules, growth monitoring, and detailed records for watering, fertilizing, pruning, harvesting, and more.

This skill appears coherent and local-only: it will create and update ~/.openclaw/workspace/plants_db.json and can write export files under your home, workspace, or /tmp. Before installing or running, consider: (1) verify the source or inspect scripts/plant_tracker.py if you don’t trust the publisher, (2) ensure the script is run in an environment you control (it will write files to your home), (3) if you want it on your PATH, you must put the script there or call it via python3 scripts/plant_tracker.py, and (4) check file permissions for the database if you’re concerned about other local users reading it. There are no network calls or hidden credential requests in the provided code.

Type: OpenClaw Skill Name: plant-tracker Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'plant-tracker' is classified as benign. The `SKILL.md` documentation clearly outlines the purpose and usage without any prompt injection attempts. The core script, `scripts/plant_tracker.py`, demonstrates robust security practices, particularly in its `export_plants` function. This function utilizes a `is_safe_path` helper that explicitly whitelists output directories to `~/.openclaw/workspace`, `~`, and `/tmp`, while explicitly blacklisting sensitive system paths (e.g., `/etc`, `/usr`, `/var`) and critical dotfiles (e.g., `~/.ssh`, `~/.bashrc`), preventing unauthorized file writes. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found.