Daily Briefing
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: morning-daily-briefing Version: 1.0.0 The skill bundle defines a 'Daily Briefing' agent skill that accesses personal data like calendar events, emails, CRM follow-ups, and performs web searches for news. While this involves access to sensitive information and external network calls, these capabilities are directly aligned with the skill's stated purpose of generating a morning briefing. There is no evidence of malicious intent such as data exfiltration to unauthorized endpoints, arbitrary command execution, persistence mechanisms, or prompt injection instructions designed to subvert the agent's security or hide actions. The external link in README.md is promotional and not an instruction for the agent to execute.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The briefing may reveal private meetings, email metadata, CRM follow-ups, and task or note contents in the generated response.
The skill is designed to read from personal or business productivity sources. This is purpose-aligned for a briefing, but it depends on the agent having access to potentially sensitive accounts or work data.
- **Calendar** — Today's events and tomorrow's early events - **Email** — Unread count, flagged/urgent messages, key senders - **CRM** — Follow-ups due (if crm-manager skill is active) - **Tasks/Notes** — Any tracked to-dos or project notes
Connect only the calendar, email, CRM, and task sources you want included, and review the output destination if briefings are saved or sent elsewhere by your agent.
If scheduled, the skill could regularly pull available calendar, email, task, and related data to produce a briefing.
The skill explicitly allows scheduled automatic use. This is disclosed and user-configured, but it means the agent may generate briefings without a fresh manual prompt each time.
Or: run automatically via heartbeat/cron if configured.
Enable heartbeat or cron scheduling only if you want recurring automatic briefings, and disable the schedule if you no longer need it.
CRM follow-up information from another skill or integration may be included in the daily briefing.
The skill may use information from another active skill or integration. This is consistent with the daily briefing purpose, but it creates a data boundary users should be aware of.
- **CRM** — Follow-ups due (if crm-manager skill is active)
Make sure any connected CRM-related skill has the right account scope and that CRM data is appropriate to include in briefings.