← 返回 Skills 市场

GutCheck Digestive Health Tracker

Name: GutCheck Digestive Health Tracker
Author: allen566

作者 allen566 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1686

总下载

当前安装

版本数

在 OpenClaw 中安装

/install gutcheck

功能描述

GutCheck - A digestive health tracking application with personalized insights and data-driven recommendations. Helps users understand food sensitivities and optimize gut wellness.

使用说明 (SKILL.md)

GutCheck Digestive Health Tracker

Overview

GutCheck empowers individuals to understand and optimize their digestive health through personalized insights and data-driven recommendations. Unlike generic health apps, GutCheck focuses specifically on digestive health with scientifically-backed insights that help users identify food sensitivities and improve gut wellness.

Features

User authentication system with secure registration and login
Personalized meal tracking with digestive impact assessment
Food sensitivity identification through data analysis
Gut health metrics and progress tracking
Scientifically-backed dietary recommendations

Installation

clawhub install gutcheck

Setup

After installation, navigate to the gutcheck directory

Create a .env file with required environment variables:

MONGODB_URI=mongodb://localhost:27017/gutcheck
JWT_SECRET=your-super-secret-jwt-key-here
PORT=5000
NODE_ENV=development

Run the application:
```
cd gutcheck
npm run dev
```

Usage

Access the application at http://localhost:3000
Register a new account or log in to an existing one
Track your meals and digestive responses
View personalized insights and recommendations

Target Users

Health-conscious individuals experiencing digestive issues
People seeking to identify food sensitivities
Those interested in optimizing their gut health
Users wanting data-driven dietary recommendations

API Endpoints

POST /api/auth/register - Register a new user
POST /api/auth/login - Login and retrieve JWT token
GET /api/auth/me - Get current user data (requires auth)
POST /api/diet/add-meal - Add a new meal entry
GET /api/diet/my-meals - Get all meals for current user
PUT/DELETE /api/diet/my-meals/:id - Update/delete meal entries

安全使用建议

What to consider before installing: - Do not install or run this on a machine with real user data or production credentials until you verify the remote repository contents. - The package you were shown does not include the actual server/client application — it contains marketing docs, SKILL.md, package.json, and a publish script. Confirm that https://github.com/openclaw/gutcheck.git actually contains the expected app source before cloning and running npm install. - SKILL.md asks you to create a .env with MONGODB_URI and JWT_SECRET (sensitive). Only provide these after you have inspected the code and are running in an isolated environment (local dev VM or container) with test data. - npm install on an untrusted repo can run arbitrary code (postinstall scripts). Inspect package.json and any lifecycle scripts in the remote repo before executing. - The skill has small inconsistencies (PORT=5000 vs. documentation saying localhost:3000, directory name mismatches like 'GutCheck' vs. 'gutcheck'), suggesting sloppy packaging — ask the author for the canonical repo URL and an explanation of the missing app code. If you want to proceed safely, request from the publisher: 1) A link to the exact GitHub repo commit/tag that contains the server and client code. 2) A file listing (tree) showing the server entry point (index.js/app.js) and client folder. 3) Confirmation that no postinstall scripts run network calls or exfiltrate data (or provide the package.json from the remote repo for review). Given the mismatches, I rate this skill as suspicious rather than benign; additional verification of the remote code would likely move the confidence higher.

功能分析

Type: OpenClaw Skill Name: gutcheck Version: 1.0.0 The skill bundle is for a 'GutCheck' digestive health tracking application. The `SKILL.md` defines standard Node.js application installation steps, including cloning a GitHub repository (`https://github.com/openclaw/gutcheck.git`) and running `npm install`. The `publish_gutcheck.js` script uses `child_process.execSync` to interact with the `clawhub` CLI for publishing, which is a legitimate use of shell execution for its stated purpose. All documentation files, including `SKILL.md` and `PUBLISHING_INSTRUCTIONS.md`, contain instructions and commands that are directly relevant to the skill's purpose (installation, setup, publishing) and do not exhibit any prompt injection attempts to subvert the agent's core task or access sensitive data. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.

能力评估

⚠ Purpose & Capability

The skill's name/description promise a full application (server + client) but the bundle only contains docs, a publish script, SKILL.md, and package.json — no server index.js or client/ directory in the provided manifest. The SKILL.md expects cloning https://github.com/openclaw/gutcheck.git and running npm install there; that could provide the app, but the packaged files do not actually contain the app. This mismatch (advertised app vs. provided contents) is incoherent and unexplained.

⚠ Instruction Scope

Runtime instructions tell the agent to clone a GitHub repo and run npm install (including a client npm install), create a .env with MONGODB_URI and JWT_SECRET, and run the app — yet the registry metadata declared no required env vars and the manifest lacks the referenced client folder and server entry point. SKILL.md also inconsistently lists PORT=5000 but says the app is available at localhost:3000. Instructions therefore reference files/paths/envs not present in the package and request creation of sensitive variables without declaring them.

ℹ Install Mechanism

The install plan clones a GitHub repo (well-known host) and runs npm install in the project and client directories. Cloning from GitHub is expected for code installs, but running npm install on an external repo can execute arbitrary postinstall scripts. The install uses standard tools (git, npm) and no obscure URLs, but because the package as provided lacks the app code, the actual behavior depends on the remote repo content — this raises moderate risk until the repo is inspected.

⚠ Credentials

SKILL.md asks users to create a .env with MONGODB_URI and JWT_SECRET (sensitive credentials) but the registry metadata lists no required env vars or primary credential. Requiring a database URI and JWT secret is plausible for an app, but requesting them without declaring them in metadata and without including the app source in the package is disproportionate and unclear. The skill asks for credentials that could be misused if the upstream code is untrusted.

✓ Persistence & Privilege

The skill is not marked always:true and does not request system-wide persistence or other skills' configs. The publish script creates and removes a temporary directory but does not alter system-wide settings. Autonomous invocation is allowed (normal) but not combined here with any other high-risk privilege.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install gutcheck
安装完成后，直接呼叫该 Skill 的名称或使用 /gutcheck 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

GutCheck 1.0.0 – Initial release of the digestive health tracking app. GutCheck - A digestive health tracking application with personalized insights and data-driven recommendations. Helps users understand food sensitivities and optimize gut wellness. - Track meals and digestive responses with personalized insights. - Identify food sensitivities using data analysis. - Access secure user registration and login functionality. - Monitor gut health metrics and view progress. - Receive scientifically-backed, data-driven dietary recommendations. - Simple setup instructions and API endpoints provided for user and meal management.

元数据

Slug gutcheck

版本 1.0.0

许可证 —

累计安装 1

当前安装数 1

历史版本数 1

常见问题