Period Care Assistant

Track menstrual cycle history, answer current cycle status questions, record new period start dates from natural-language messages such as "月经来了", predict th...

This skill appears to do what it says: a local, encrypted period tracker implemented as a Node script that needs one secret (PERIOD_TRACKER_KEY). Before installing: (1) keep PERIOD_TRACKER_KEY private and consider providing a per-skill key rather than a broader account secret; (2) set PERIOD_TRACKER_STORE to a secure path you control if you are concerned about where the encrypted file will live; (3) be cautious when configuring delivery-mode=webhook or creating cron jobs — verify that the webhook endpoint is trusted, uses HTTPS, and that cron job payloads and logs are not visible to third parties, since reminder text includes predicted start dates which are sensitive health data; (4) run the included tests locally to validate behavior. If you plan to connect external bridges (DingTalk/webhook), review their privacy/security before enabling automatic delivery.

Type: OpenClaw Skill Name: period-care-assistant Version: 0.1.0 The period-care-assistant skill is a well-implemented tool for tracking menstrual health with a strong focus on privacy. It uses a local Node.js script (period_tracker.mjs) to handle logic and stores sensitive user data in an encrypted local file using AES-256-GCM. The instructions in SKILL.md are strictly aligned with the stated purpose, and the deployment documentation provides clear, non-malicious guidance on environment configuration and cron-based reminders. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.