← 返回 Skills 市场
Nutrition Tracker
作者
abstract-sum
· GitHub ↗
· v0.1.0
416
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install nutrition-tracker
功能描述
Track daily calories and macros in Obsidian, with profile initialization (sex/height/weight/goal) and goal-based target checks. Includes i18n (zh-CN/en-US)....
安全使用建议
This skill appears to do exactly what it says: run the provided scripts to store a nutrition profile and log meals inside an Obsidian vault. Before installing or running it: (1) review the included scripts (they are short and bundled) — they operate locally and do not make network requests; (2) back up your Obsidian vault or set OBSIDIAN_VAULT to a test directory to avoid unintended modifications; (3) be aware the scripts will create/overwrite health/eat/profile.json and a monthly markdown file in the chosen vault; and (4) if you need stricter isolation, run the scripts in a sandbox or on a test vault first.
功能分析
Type: OpenClaw Skill
Name: nutrition-tracker
Version: 0.1.0
The skill contains a code injection vulnerability in `scripts/nutrition_init.sh`, where shell variables (like `--sex` or `--height`) are directly interpolated into an unquoted Python heredoc. This allows for arbitrary Python code execution if the input is maliciously crafted. While this is a significant security flaw, the skill's overall logic is consistent with its stated purpose of nutrition tracking in Obsidian, and there is no evidence of intentional data exfiltration, backdoors, or malicious intent.
能力评估
Purpose & Capability
The scripts create/read/write a profile.json and monthly markdown files inside an Obsidian vault (default: ~/Documents/obsidian/yzhai-daily) and compute macro/ calorie targets. The requested files, commands, and behavior line up with the 'Nutrition Tracker' description; there are no unrelated services, credentials, or binaries required.
Instruction Scope
The runtime instructions tell the agent to run bundled shell/Python scripts that will modify files in the user's Obsidian vault (create directories, write profile.json, update monthly .md logs). This is expected for the stated purpose, but be aware the skill will write to your filesystem (the default vault or whatever OBSIDIAN_VAULT you set). There are no network calls or attempts to read unrelated system files. If you want to be cautious, back up your vault or point OBSIDIAN_VAULT at a test directory before use.
Install Mechanism
There is no install specification (instruction-only). All code is included in the skill bundle (scripts and locales); nothing is downloaded or installed from external URLs.
Credentials
The skill requires no credentials or secret environment variables. It optionally respects OBSIDIAN_VAULT if present to choose the storage path; otherwise it uses a sensible default. No broad credential access is requested.
Persistence & Privilege
always is false and the skill is user-invocable only. It does not attempt to modify other skills or system-wide settings; its persistent effect is limited to creating/updating files in the vault (its own data).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nutrition-tracker - 安装完成后，直接呼叫该 Skill 的名称或使用
/nutrition-tracker触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release: Obsidian meal log + profile init + i18n (zh-CN/en-US) + target check.
元数据
常见问题
Nutrition Tracker 是什么？
Track daily calories and macros in Obsidian, with profile initialization (sex/height/weight/goal) and goal-based target checks. Includes i18n (zh-CN/en-US).... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 416 次。
如何安装 Nutrition Tracker？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nutrition-tracker」即可一键安装，无需额外配置。
Nutrition Tracker 是免费的吗？
是的，Nutrition Tracker 完全免费（开源免费），可自由下载、安装和使用。
Nutrition Tracker 支持哪些平台？
Nutrition Tracker 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nutrition Tracker？
由 abstract-sum（@abstract-sum）开发并维护，当前版本 v0.1.0。
推荐 Skills