Daily Brief Digest

Generates a daily brief including urgent emails (himalaya), upcoming calendar events (gog), and relevant news. Use when the user asks for a morning summary, daily briefing, or a status update on their day.

Security Scan

The skill is mostly coherent with its stated purpose (reading local email/calendar, assembling a digest, and saving a log) but has a few concerning omissions and privacy risks — notably it persistently writes full reports to your home directory and relies on local CLIs (himalaya, gog) that are not declared in the registry metadata.

Purpose & Capability

The skill's description (email via himalaya, calendar via gog, plus news) matches the code and instructions. However the registry declares no required binaries while SKILL.md and scripts/digest.js clearly depend on local CLIs (himalaya and gog). That omission is an inconsistency the user should be aware of.

Instruction Scope

Instructions explicitly tell the agent to read local email (himalaya) and calendar (gog) and to fetch news via web_fetch/browser — these actions are within the described purpose but are sensitive. Crucially, the skill (and the script) automatically writes a permanent Markdown log containing the assembled digest to ~/.openclaw/cron/DailyDigest_logs/ without requiring user approval each run; that persistent storage of potentially private emails/calendar items is a privacy/security risk and should be disclosed to or controllable by the user.

Install Mechanism

There is no install spec (instruction-only) and the included script is small and local; nothing is downloaded from external URLs. This is low install-risk, but the script will create files under the user's home directory when run.

Credentials

No credentials or environment variables are requested, which is reasonable. The script uses HOME/USERPROFILE to write logs (expected). However, the skill expects local binaries (himalaya, gog) but the registry metadata lists none — a proportion/manifest mismatch. Also the skill uses the `message` tool to notify external channels (Telegram/WhatsApp/Webchat) — that can transmit summaries outside the device and should be considered when granting permission to run automatically.

Persistence & Privilege

The skill does not request elevated 'always' privilege, but it does persistently log digests into a dot-folder in the user's home directory every run (scripts/digest.js auto-creates ~/.openclaw/cron/DailyDigest_logs/[date].md). That persistent storage of email/calendar content increases exposure if other processes or backups access this folder; the cron guide encourages scheduling automatic runs, which amplifies the privacy/attack surface.

What to consider before installing

What to consider before installing: - This skill reads your local email and calendar using the himalaya and gog CLIs and will save full digests as permanent Markdown files in ~/.openclaw/cron/DailyDigest_logs/ by default. If you keep sensitive content in email/calendar, these logs will persist on disk. - The registry metadata does not declare the required binaries (himalaya, gog). Confirm those tools exist and are what you expect before running the skill. - The skill will send a short notification via the platform's `message` tool to your configured channel (Telegram/WhatsApp/Webchat). Decide whether you’re comfortable with summaries being posted to those external channels. - If you want to reduce risk: modify scripts/digest.js to avoid storing full message bodies (or encrypt/limit stored fields), change the log location or permissions, require manual approval before saving/sending, or disable cron automatic scheduling until you’ve reviewed behavior. Given these facts, the skill appears to do what it claims but has privacy and manifest inconsistencies worth addressing before enabling automated runs.

Daily Digest

This skill provides a structured way to get a quick overview of your day. It relies on locally configured tools (himalaya for email and gog for calendar) and does not store any personal credentials within the skill itself.

Workflow

1. Email Triage: Use himalaya --output json envelope list --page-size 20 to get recent emails. Identify urgent items needing attention.
2. Calendar & Task Sync: Use gog calendar events [calendarId] --from [today_start] --to [today_end] to fetch today's schedule. Also check for due tasks using gog tasks/contacts or specific list commands if available.
3. News Retrieval: Use web_fetch or browser to find the top 3-5 news stories of the day.
4. Log & Present: Use scripts/digest.js to assemble these components into a stylized HTML report. CRITICAL: The script automatically saves this report as a permanent Markdown file in .openclaw/cron/DailyDigest_logs/[date].md for historical record.
5. Notify User: Send a brief notification via the message tool to the user's active channel. Mention that the full detailed log is available at .openclaw/cron/DailyDigest_logs/[date].md.

Data Sources

• Email: himalaya CLI.
• Calendar: gog CLI.
• News: Web search or trusted RSS feeds.
• Logs: Saved locally to ~/.openclaw/cron/DailyDigest_logs/.

Example Output

📅 Daily Briefing - 2026-02-12

📧 Emails (Recent)

• Google: Security alert (04:10)
• The Replit Team: Unlock Replit Agent's Full Potential (Feb 11)

🗓️ Calendar

• 10:30 AM: Workout (Shoulder)
• 02:00 PM: Project Review

📰 News

• [Top news item 1]
• [Top news item 2]