← 返回 Skills 市场
Fitness Log
作者
bytesagain1
· GitHub ↗
· v1.0.0
· MIT-0
309
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install fitness-log
功能描述
Fitness Log — Fitness Log — track workouts & progress. Personal daily-use tool for tracking and organizing your life. Use when you need Fitness Log capabilit...
使用说明 (SKILL.md)
Fitness Log
Fitness Log — track workouts & progress
Why This Skill?
- Designed for everyday personal use
- No external dependencies or accounts needed
- Data stored locally — your privacy, your data
- Simple commands, powerful results
Commands
log— \x3Ctype> \x3Cdur> [note] Log workout (type=run/gym/yoga/swim/bike)weight— \x3Ckg> Log body weighttoday— Today's activityweek— Weekly summaryhistory— [n] Workout history (default 10)stats— Overall statisticsstreak— Workout streakplan— \x3Cgoal> Generate workout planprogress— Weight progress chartpersonal-best— Personal recordsexport— [format] Export (csv/json)info— Version info
Quick Start
fitness_log.sh help
Note: This is an original, independent implementation by BytesAgain. Not affiliated with or derived from any third-party project.
Powered by BytesAgain | bytesagain.com | [email protected]
安全使用建议
This skill is internally coherent and appears low-risk: it logs workouts and weights locally and makes no network calls. Before installing, confirm you have python3 available (the script runs python3 snippets) and that you're comfortable with the skill creating ~/.fitness (or another directory if FIT_DIR is set). If you allow an agent to run the skill autonomously, be aware that FIT_DIR can redirect where files are written — only allow the agent to set FIT_DIR to directories you trust. You can also inspect the included scripts (scripts/fitness_log.sh) yourself; there are no hidden network endpoints or credential uses. If you want extra caution, back up any data and run the script in a constrained environment (or container) first.
功能分析
Type: OpenClaw Skill
Name: fitness-log
Version: 1.0.0
The skill is classified as suspicious due to multiple command injection vulnerabilities in `scripts/fitness_log.sh`. The script interpolates unsanitized shell variables (such as `$note`, `$type`, and `$goal`) directly into Python code blocks executed via heredocs, which could allow arbitrary code execution if provided with crafted input. While these represent critical security flaws (RCE risk), the code appears to be a functional fitness tracker with no evidence of intentional malice, data exfiltration, or persistence mechanisms.
能力评估
Purpose & Capability
The name/description match the implementation: a local workout/weight tracker. One small inconsistency: the SKILL.md/runtime and the script use python3 (and the script is a bash wrapper), but the registry metadata lists no required binaries — the package should declare python3 (and bash/sh) as required.
Instruction Scope
The SKILL.md instructions are narrowly scoped and the included script implements the advertised commands. All actions are local: reading/writing JSON and CSV files in a single directory, printing summaries, and generating simple text output. There are no instructions to read unrelated files or to contact external services.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded during installation. A script file is included and will be present on disk, but no remote code is fetched. This is low-risk compared with packages that download/extract code from arbitrary URLs.
Credentials
No credentials or external env vars are required. The script does honor an optional FIT_DIR environment variable to change where data is stored; this is reasonable but means a maliciously set FIT_DIR could redirect storage to another path. By default it uses $HOME/.fitness.
Persistence & Privilege
The skill is not marked always:true and does not attempt to change other skills or system config. It can be invoked by the agent (normal behavior), and its file writes are limited to its data directory.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install fitness-log - 安装完成后，直接呼叫该 Skill 的名称或使用
/fitness-log触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Fitness Log 是什么？
Fitness Log — Fitness Log — track workouts & progress. Personal daily-use tool for tracking and organizing your life. Use when you need Fitness Log capabilit... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 309 次。
如何安装 Fitness Log？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install fitness-log」即可一键安装，无需额外配置。
Fitness Log 是免费的吗？
是的，Fitness Log 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Fitness Log 支持哪些平台？
Fitness Log 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Fitness Log？
由 bytesagain1（@bytesagain1）开发并维护，当前版本 v1.0.0。
推荐 Skills