Plant Doctor

Expert plant ID, disease diagnosis, personalized care advice, watering schedules, toxicity alerts, and propagation guidance—all with a warm, friendly tone.

This skill appears to do what it says (plant ID, diagnosis, care schedules) and it uses only local files by default. Before installing, consider the following: - Privacy: If you enable 'Supercharged Memory' or any external memory/backup, your plant data and possibly photos may be stored off-device. If you want strictly local-only behavior, do NOT enable external memory or index your plants in cloud memory. - Vision/tool handling: Image analysis may be performed by whatever vision capability your agent uses. If that is a hosted model or tool, your photos may be sent to that provider. Confirm your model/vision provider's privacy policy if you care about where images go. - Dashboard option: The Dashboard Companion explicitly requires a Supabase database and environment variables. Only set up the dashboard if you understand and control the database configuration (use RLS, private buckets, and env vars rather than hardcoding keys). - Verify audit claims: README/SECURITY assert an audit and 'never phones home' — those claims conflict with the optional memory/dashboard paths. Ask the publisher for the audit report or details if that matters to you. - Files & permissions: The setup will create plants/ and files and set restrictive permissions (chmod 700/600). That is reasonable for local storage; ensure your workspace is private and you are comfortable with the skill writing to it. If you accept these caveats (especially around memory and vision provider handling), the skill is usable. If you require strong local-only guarantees, disable any cloud memory, avoid enabling the dashboard, and confirm which vision backend will process your images.

Type: OpenClaw Skill Name: normieclaw-plant-doctor Version: 1.0.3 The Plant Doctor skill is a legitimate plant care assistant that uses vision analysis and local file storage to manage plant health and watering schedules. It demonstrates proactive security practices by instructing the agent to set restrictive file permissions (chmod 700/600 in SETUP-PROMPT.md), enforcing path safety rules to prevent directory traversal, and including explicit prompt-injection defense instructions in SKILL.md. No evidence of data exfiltration, malicious execution, or harmful intent was found.