← Back to Skills Marketplace
Fitness Log
by
bytesagain1
· GitHub ↗
· v1.0.0
· MIT-0
309
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install fitness-log
Description
Fitness Log — Fitness Log — track workouts & progress. Personal daily-use tool for tracking and organizing your life. Use when you need Fitness Log capabilit...
README (SKILL.md)
Fitness Log
Fitness Log — track workouts & progress
Why This Skill?
- Designed for everyday personal use
- No external dependencies or accounts needed
- Data stored locally — your privacy, your data
- Simple commands, powerful results
Commands
log— \x3Ctype> \x3Cdur> [note] Log workout (type=run/gym/yoga/swim/bike)weight— \x3Ckg> Log body weighttoday— Today's activityweek— Weekly summaryhistory— [n] Workout history (default 10)stats— Overall statisticsstreak— Workout streakplan— \x3Cgoal> Generate workout planprogress— Weight progress chartpersonal-best— Personal recordsexport— [format] Export (csv/json)info— Version info
Quick Start
fitness_log.sh help
Note: This is an original, independent implementation by BytesAgain. Not affiliated with or derived from any third-party project.
Powered by BytesAgain | bytesagain.com | [email protected]
Usage Guidance
This skill is internally coherent and appears low-risk: it logs workouts and weights locally and makes no network calls. Before installing, confirm you have python3 available (the script runs python3 snippets) and that you're comfortable with the skill creating ~/.fitness (or another directory if FIT_DIR is set). If you allow an agent to run the skill autonomously, be aware that FIT_DIR can redirect where files are written — only allow the agent to set FIT_DIR to directories you trust. You can also inspect the included scripts (scripts/fitness_log.sh) yourself; there are no hidden network endpoints or credential uses. If you want extra caution, back up any data and run the script in a constrained environment (or container) first.
Capability Analysis
Type: OpenClaw Skill
Name: fitness-log
Version: 1.0.0
The skill is classified as suspicious due to multiple command injection vulnerabilities in `scripts/fitness_log.sh`. The script interpolates unsanitized shell variables (such as `$note`, `$type`, and `$goal`) directly into Python code blocks executed via heredocs, which could allow arbitrary code execution if provided with crafted input. While these represent critical security flaws (RCE risk), the code appears to be a functional fitness tracker with no evidence of intentional malice, data exfiltration, or persistence mechanisms.
Capability Assessment
Purpose & Capability
The name/description match the implementation: a local workout/weight tracker. One small inconsistency: the SKILL.md/runtime and the script use python3 (and the script is a bash wrapper), but the registry metadata lists no required binaries — the package should declare python3 (and bash/sh) as required.
Instruction Scope
The SKILL.md instructions are narrowly scoped and the included script implements the advertised commands. All actions are local: reading/writing JSON and CSV files in a single directory, printing summaries, and generating simple text output. There are no instructions to read unrelated files or to contact external services.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded during installation. A script file is included and will be present on disk, but no remote code is fetched. This is low-risk compared with packages that download/extract code from arbitrary URLs.
Credentials
No credentials or external env vars are required. The script does honor an optional FIT_DIR environment variable to change where data is stored; this is reasonable but means a maliciously set FIT_DIR could redirect storage to another path. By default it uses $HOME/.fitness.
Persistence & Privilege
The skill is not marked always:true and does not attempt to change other skills or system config. It can be invoked by the agent (normal behavior), and its file writes are limited to its data directory.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install fitness-log - After installation, invoke the skill by name or use
/fitness-log - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Fitness Log?
Fitness Log — Fitness Log — track workouts & progress. Personal daily-use tool for tracking and organizing your life. Use when you need Fitness Log capabilit... It is an AI Agent Skill for Claude Code / OpenClaw, with 309 downloads so far.
How do I install Fitness Log?
Run "/install fitness-log" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Fitness Log free?
Yes, Fitness Log is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Fitness Log support?
Fitness Log is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Fitness Log?
It is built and maintained by bytesagain1 (@bytesagain1); the current version is v1.0.0.
More Skills