← Back to Skills Marketplace
hsyhph

Health Check

by hsyhph · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
106
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hsyhp-healthcheck
Description
Track water and sleep with JSON file storage
README (SKILL.md)

Health Tracker

Simple tracking for water intake and sleep using JSON file.

Data Format

File: {baseDir}/health-data.json

{
  "water": [{"time": "ISO8601", "cups": 2}],
  "sleep": [{"time": "ISO8601", "action": "sleep|wake"}]
}

Add Water Record

When user says "uống X cốc" or "uống nước X cốc":

node -e "const fs=require('fs');const f='{baseDir}/health-data.json';let d={water:[],sleep:[]};try{d=JSON.parse(fs.readFileSync(f))}catch(e){}d.water.push({time:new Date().toISOString(),cups:CUPS});fs.writeFileSync(f,JSON.stringify(d));console.log('Da ghi: '+CUPS+' coc')"

Replace CUPS with number from user input.

Add Sleep Record

When user says "đi ngủ":

node -e "const fs=require('fs');const f='{baseDir}/health-data.json';let d={water:[],sleep:[]};try{d=JSON.parse(fs.readFileSync(f))}catch(e){}d.sleep.push({time:new Date().toISOString(),action:'sleep'});fs.writeFileSync(f,JSON.stringify(d));console.log('Da ghi: di ngu')"

Add Wake Record

When user says "thức dậy" or "dậy rồi":

node -e "const fs=require('fs');const f='{baseDir}/health-data.json';let d={water:[],sleep:[]};try{d=JSON.parse(fs.readFileSync(f))}catch(e){}const last=d.sleep.filter(s=>s.action==='sleep').pop();d.sleep.push({time:new Date().toISOString(),action:'wake'});fs.writeFileSync(f,JSON.stringify(d));if(last){const h=((new Date()-new Date(last.time))/3600000).toFixed(1);console.log('Da ngu: '+h+' gio')}else{console.log('Da ghi: thuc day')}"

View Stats

When user says "thống kê" or "xem thống kê":

node -e "const fs=require('fs');const f='{baseDir}/health-data.json';let d={water:[],sleep:[]};try{d=JSON.parse(fs.readFileSync(f))}catch(e){}console.log('Water:',d.water.length,'records');console.log('Sleep:',d.sleep.length,'records');const today=d.water.filter(w=>new Date(w.time).toDateString()===new Date().toDateString());console.log('Today:',today.reduce((s,w)=>s+w.cups,0),'cups')"

Update Record

To update last water entry:

node -e "const fs=require('fs');const f='{baseDir}/health-data.json';let d=JSON.parse(fs.readFileSync(f));d.water[d.water.length-1].cups=NEW_CUPS;fs.writeFileSync(f,JSON.stringify(d));console.log('Updated')"

Delete Record

To delete last water entry:

node -e "const fs=require('fs');const f='{baseDir}/health-data.json';let d=JSON.parse(fs.readFileSync(f));d.water.pop();fs.writeFileSync(f,JSON.stringify(d));console.log('Deleted')"

Notes

  • Uses Node.js built-in modules only
  • File auto-created if missing
  • All timestamps in ISO8601 format
Usage Guidance
This skill appears to do what it says (store and read health records in a JSON file) and does not contact external services, but it is risky as written: the SKILL.md instructs running node -e one-liners with direct substitution of user-provided values (CUPS, NEW_CUPS). Before installing or enabling it, ensure the agent will (1) run these commands in a restricted/sandboxed working directory mapped from {baseDir}, (2) only substitute validated numeric values (e.g., parseInt/Number checks) rather than raw text, or better yet pass user values as safe arguments instead of embedding them into code strings, and (3) have Node.js available (declare node as a required binary). If you cannot guarantee input sanitization or sandboxing, avoid enabling this skill or request a safer implementation (small script file that accepts sanitized CLI args rather than executing interpolated -e code). Also consider file permissions and backups for the health-data.json file.
Capability Analysis
Type: OpenClaw Skill Name: hsyhp-healthcheck Version: 1.0.0 The skill implements health tracking using Node.js one-liners in SKILL.md that directly embed user-provided values (e.g., 'CUPS') into shell-executed code. This pattern introduces a code injection vulnerability, as a malicious user could potentially provide input that executes arbitrary JavaScript or shell commands. While the logic is aligned with the stated purpose and no evidence of intentional malice or data exfiltration was found, the insecure handling of input templates is a high-risk vulnerability.
Capability Assessment
Purpose & Capability
The described purpose (track water and sleep in a JSON file) matches the commands provided. However the SKILL.md uses Node.js one-liners but the skill metadata does not declare Node.js as a required binary — a minor incoherence that could cause failures or unexpected substitutions if the agent environment differs.
Instruction Scope
All instructions operate only on {baseDir}/health-data.json (no networking), which is appropriate. However the instructions tell the agent to replace placeholders (CUPS, NEW_CUPS) with user input directly inside node -e strings that are executed on the shell. If the agent substitutes raw user text there, a malicious or malformed input can inject arbitrary JavaScript (or break out into shell metacharacters) and execute with the agent's permissions. The SKILL.md provides no sanitization guidance or safe argument-passing pattern.
Install Mechanism
Instruction-only skill with no install steps or external downloads — low install risk.
Credentials
No environment variables, credentials, or config paths requested; access is limited to a single JSON file under {baseDir}, which is proportionate to the described task.
Persistence & Privilege
Does not request permanent/always-on presence, does not modify other skills or system-wide settings. Normal user-invocable skill behavior.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hsyhp-healthcheck
  3. After installation, invoke the skill by name or use /hsyhp-healthcheck
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of healthcheck skill for tracking water intake and sleep. - Supports adding, updating, and deleting water intake records. - Allows logging sleep and wake times. - Provides simple statistics for daily water intake and overall records. - Stores all data in a local JSON file with automatic file creation if missing. - Uses only built-in Node.js modules; no external dependencies.
Metadata
Slug hsyhp-healthcheck
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Health Check?

Track water and sleep with JSON file storage. It is an AI Agent Skill for Claude Code / OpenClaw, with 106 downloads so far.

How do I install Health Check?

Run "/install hsyhp-healthcheck" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Health Check free?

Yes, Health Check is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Health Check support?

Health Check is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Health Check?

It is built and maintained by hsyhph (@hsyhph); the current version is v1.0.0.

💬 Comments