← 返回 Skills 市场
Mood Tracker
作者
bytesagain4
· GitHub ↗
· v1.0.0
· MIT-0
289
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mood-tracker
功能描述
Mood Tracker — Mood Tracker — monitor emotional wellbeing. Personal daily-use tool for tracking and organizing your life. Use when you need Mood Tracker capa...
安全使用建议
This script is a local-only mood tracker that creates ~/.moods/moods.json and journal files (or a directory you set with MOOD_DIR). It does not contact external servers or request credentials. Before using: (1) verify you have python3 and a POSIX shell available, (2) inspect the script if you want to be sure it meets your policies, (3) consider setting MOOD_DIR if you prefer the data stored somewhere other than your home directory, and (4) back up or export your data if you need portability. Note the small metadata/instruction inconsistencies (runtime declared as python3 while the script is bash + python snippets) — these are likely harmless but worth correcting.
功能分析
Type: OpenClaw Skill
Name: mood-tracker
Version: 1.0.0
The skill contains multiple command injection vulnerabilities in `scripts/mood_tracker.sh`. Specifically, the `log` and `triggers` commands embed unsanitized shell variables (like `$note` and `$mood`) directly into Python code blocks and execution strings, which could allow for arbitrary code execution if the agent processes untrusted input. While the functionality aligns with the stated purpose and no evidence of intentional malice or data exfiltration was found, these implementation flaws pose a significant security risk.
能力评估
Purpose & Capability
Name/description match the implementation: a local mood tracker. One minor inconsistency: SKILL.md lists runtime: python3 and the script uses python3 for small snippets, but the top-level entrypoint is a bash script — the registry metadata lists no required binaries while the code actually needs a POSIX shell and python3.
Instruction Scope
Runtime instructions and the script operate on local files only (default $HOME/.moods or $MOOD_DIR). The commands read/write JSON and markdown journal files and produce local summaries. There are no network calls, hidden endpoints, or attempts to read unrelated system files. (Minor note: tips.md mentions 'export' but no export command exists in the script.)
Install Mechanism
No install spec — this is instruction-only with an included script. That is low-risk since nothing is downloaded or installed automatically. The script will execute locally if the user runs it.
Credentials
No required environment variables or credentials. The script honors an optional MOOD_DIR env var to change the storage location, which is proportionate to its function. No sensitive credentials are requested or used.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent platform privileges. It only writes its own data under the user's chosen directory and does not modify other skills or system-wide configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mood-tracker - 安装完成后，直接呼叫该 Skill 的名称或使用
/mood-tracker触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Mood Tracker 是什么？
Mood Tracker — Mood Tracker — monitor emotional wellbeing. Personal daily-use tool for tracking and organizing your life. Use when you need Mood Tracker capa... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 289 次。
如何安装 Mood Tracker？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mood-tracker」即可一键安装，无需额外配置。
Mood Tracker 是免费的吗？
是的，Mood Tracker 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Mood Tracker 支持哪些平台？
Mood Tracker 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mood Tracker？
由 bytesagain4（@xueyetianya）开发并维护，当前版本 v1.0.0。
推荐 Skills