← Back to Skills Marketplace
My Fitness Claw
by
Serg010101
· GitHub ↗
· v1.7.0
916
Downloads
2
Stars
1
Active Installs
18
Versions
Install in OpenClaw
/install my-fitness-claw
Description
Your personal nutrition sidekick. Log meals in plain natural language, track macros (P/C/F) automatically, and visualize your progress on a beautiful real-ti...
Usage Guidance
This skill is coherent with its stated purpose, but it stores personal meal data in workspace files and the agent memory directory. Before using or publishing: (1) review and back up any existing memory/ or nutrition/ files you care about; (2) understand that the dashboard loads Chart.js from a public CDN when opened in a browser; (3) if you plan to share the skill, follow the included publishing checklist to sanitize daily_macros.json, offline_data.js, insights.json, targets.json, and memory/ to avoid leaking personal information.
Capability Analysis
Type: OpenClaw Skill
Name: my-fitness-claw
Version: 1.7.0
The skill's core functionality for nutrition tracking appears benign. However, the `SKILL.md` file contains a prompt injection instruction under 'Workflow: Logging Food' (Step 6) that tells the agent (or implicitly, the user) to `Run python -m http.server 8000 from the workspace root`. This instruction, if executed, leads to arbitrary command execution and exposes the entire OpenClaw workspace via a local web server, posing a significant information disclosure risk. While the stated purpose is for convenient offline dashboard access, this method is a severe vulnerability due to its broad scope and potential for misuse, classifying the skill as suspicious rather than benign.
Capability Assessment
Purpose & Capability
Name and description (nutrition logging, macros/micros, dashboard) match the declared tools (canvas, read, write, edit) and the files present (nutrition/, canvas/, assets/). There are no unrelated binaries or external credentials requested.
Instruction Scope
Instructions direct the agent to read/write JSON under assets/nutrition/ and to write an offline mirror (assets/canvas/offline_data.js) and a memory file (memory/YYYY-MM-DD.md). This is consistent with a logging/dashboard skill, but it does mean the agent will persist user-provided meal data into workspace files and the agent memory directory as part of normal operation.
Install Mechanism
No install spec; the skill is instruction-only with small static assets and an offline_data.js mirror. The only external resource is Chart.js pulled from jsdelivr when the dashboard is opened in a browser, which is expected for a web dashboard.
Credentials
The skill requests no environment variables or external credentials. It declares the exact paths it will touch (nutrition/, canvas/, memory/), and the SKILL.md uses only those paths.
Persistence & Privilege
always is false and model invocation is allowed (defaults). The skill writes its own assets and memory files (normal for a local logging skill). It does not request permanent platform-wide privileges or modify other skills' configurations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install my-fitness-claw - After installation, invoke the skill by name or use
/my-fitness-claw - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.7.0
Added automatic micronutrient tracking based on 32yo male averages and general improvements.
v1.6.0
Fixed 7-day history sync issue in dashboard
v1.5.0
Redesigned history cards, added daily meal log breakdown, improved XSS safety, and implemented offline mirror fallback.
v1.4.1
Separated personal data from public distribution
v1.4.0
Added Today's Log tab, meal categorization, and timezone support
v1.3.1
Security: Removed personal data from template files
v1.3.0
General updates and bug fixes
v1.2.5
Security fix: Completely decoupled data from code to eliminate RCE risk. Dashboard now fetches data from JSON files.
v1.2.4
Privacy fix: Removed personal data from template files.
v1.2.3
Explicitly use workspace root paths for user data persistence.
v1.2.2
Security fix: Removed exec dependency and replaced sync script with native tool injection.
v1.2.1
Security: Removed exec requirement and replaced script-based sync with native edit tool logic to resolve suspicious classification.
v1.2.0
Fix XSS vulnerability in dashboard by using textContent for insights
v1.1.2
Addressed security feedback: added node binary requirement, restricted paths, and made script paths relative to skill folder.
v1.1.1
Added automatic UI sync script and updated workflow.
v1.1.0
- Added a README.md file for improved documentation and onboarding.
- Updated SKILL.md with a new, more user-friendly description that highlights natural language logging, real-time dashboard, and chat control.
- No changes to workflow or functionality; documentation and description enhancements only.
v1.0.1
- Added a `requires` section specifying needed tools and file paths for improved integration.
- Updated workflow steps for logging food, clarifying the tool usage (`write`, `edit`, `canvas`) in each step.
- Emphasized checking the common foods list before estimating macros.
- Refined dashboard update instructions, specifying API usage for presenting and syncing data.
- Cleaned up language for clearer guidance throughout the SKILL.md file.
v1.0.0
Initial release of MyFitnessClaw.
- Track daily nutrition (calories, protein, carbs, fats) with a structured log.
- Manage and update personal macro targets.
- View progress and insights on a visual macro dashboard.
- Log foods quickly, with automatic macro estimation if needed.
- Receive AI-driven health tips based on your current progress.
Metadata
Frequently Asked Questions
What is My Fitness Claw?
Your personal nutrition sidekick. Log meals in plain natural language, track macros (P/C/F) automatically, and visualize your progress on a beautiful real-ti... It is an AI Agent Skill for Claude Code / OpenClaw, with 916 downloads so far.
How do I install My Fitness Claw?
Run "/install my-fitness-claw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is My Fitness Claw free?
Yes, My Fitness Claw is completely free (open-source). You can download, install and use it at no cost.
Which platforms does My Fitness Claw support?
My Fitness Claw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created My Fitness Claw?
It is built and maintained by Serg010101 (@serg010101); the current version is v1.7.0.
More Skills