Nightly Build

Automates nightly maintenance tasks like skill audits, updates, cleanup, and health checks, then summarizes a morning report.

Security Scan

The skill's code and runtime instructions align with a nightly maintenance/reporting tool: it scans the workspace and installed skills, checks git/npm state, cleans old logs, and writes a report to the workspace memory folder.

Purpose & Capability

Name/README indicate nightly maintenance and reporting. The code performs system checks, npm audit, git status checks, and log cleanup inside a workspace -- all consistent with that purpose. Minor mismatch: SKILL.md mentions 'Auto-Update: Pull latest changes from git repos' but the provided scripts only check git status/remote update and do not perform automatic 'git pull' or forced updates.

Instruction Scope

SKILL.md asks the agent to schedule and run maintenance tasks; the scripts follow that scope. The scripts run shell commands (git, npm audit, df, uptime, vm_stat), read the workspace/skills/memory directories, delete .log files older than 7 days in the memory directory, and write a nightly report. These actions are within the stated task set, but they will read repository files (package.json, SKILL.md) and run npm audit (which may contact the network) and remove logs in MEMORY_DIR — so the agent will surface filesystem and command output to whoever reads the report.

Install Mechanism

Instruction-only with two script files; no install spec and no external download. Lowest-risk install mechanism.

Credentials

No required environment variables or credentials. Scripts optionally honor WORKSPACE_DIR which is reasonable. No requests for unrelated secrets or config paths.

Persistence & Privilege

always is false and the skill does not request elevated system persistence. It writes reports and logs to the workspace memory directory and may delete old logs there — this is consistent with a cleanup task. It does not modify other skills' configs.

Assessment

This skill will read your workspace and the skills/ and memory/ directories, run system/git/npm commands, remove .log files older than 7 days in the memory directory, and write a nightly-report.md there. Before installing: 1) Confirm WORKSPACE_DIR will point to the intended project (or set it explicitly). 2) Ensure there are no secrets or sensitive files in the workspace/skills directories you don't want read or included in reports. 3) If you rely on logs, back them up since the skill deletes old .log files in MEMORY_DIR. 4) Test a manual run first (nightly run) to inspect the report output and network activity (npm audit and git remote update can contact external services). The small mismatch between the SKILL.md 'auto-update' wording and the scripts (which only check status) is likely benign but worth noting.

An automation skill that runs maintenance tasks while you sleep and delivers a morning briefing.

Inspired by The Nightly Build.

Commands

• nightly report — Show the last nightly build report.
• nightly run — Trigger a manual run (for testing).
• nightly config — Configure tasks (update skills, check disk, etc.).

Tasks

• 📦 Skill Audit: Run npm audit on installed skills.
• 🔄 Auto-Update: Pull latest changes from git repos.
• 🧹 Cleanup: Remove temporary files and old logs.
• 📊 Health Check: Verify disk space and system load.
• 📝 Briefing: Summarize everything into a morning report.

Setup

Add this to your cron (e.g., via openclaw cron add):

{
  "schedule": { "kind": "cron", "expr": "0 3 * * *", "tz": "Asia/Shanghai" },
  "payload": { "kind": "agentTurn", "message": "Run nightly build tasks and generate report." }
}