墨记 (moji-daily)

PassAudited by ClawScan on May 14, 2026.

Overview

This appears to be a transparent local daily-task tracker; its main risks are intentional recurring reminders and persistent local task files.

Install this only if you want daily scheduled task-tracking prompts. Before copying the cron JSON, confirm the times, Feishu channel, and tasks directory are appropriate. Keep the local task files private, avoid putting secrets in them, and remove the cron entries if you want the automation to stop.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If installed, the agent will keep prompting and potentially updating task files every day until the cron entries are removed.

Why it was flagged

The script outputs three daily cron entries that cause the agent to initiate task-tracking interactions on a recurring schedule.

Skill content
"schedule": "0 9 * * *" ... "schedule": "0 12 * * *" ... "schedule": "0 18 * * *"
Recommendation

Only add the cron JSON if you want recurring automation, and keep a note of how to remove or disable those cron entries later.

What this means

Your local task files may be changed based on chat messages and scheduled prompts.

Why it was flagged

The workflow instructs the agent to create and modify local task files. This is bounded to the task-tracking directory and includes confirmation for the evening rollover.

Skill content
写入 `tasks/YYYY-MM-DD.md` ... 用户确认后 ... 创建 `tasks/YYYY-MM-DD.md`(明天) ... 把未完成任务复制到明天的文件
Recommendation

Review task-file changes if accuracy matters, and keep backups if these files become important records.

What this means

Private work or personal task details may remain on disk indefinitely and could influence later summaries or rollovers.

Why it was flagged

The skill stores task history and notes persistently, and later workflows may reuse or roll that content forward.

Skill content
文件位置:`tasks/YYYY-MM-DD.md` ... 永不删除旧文件 ... 跨日滚动时保留备注/反思内容
Recommendation

Keep the tasks directory private, avoid storing secrets in task notes, and periodically delete or archive old files if needed.

What this means

Task prompts and summaries may be visible or retained in the configured chat service.

Why it was flagged

The generated cron configuration routes scheduled prompts through the Feishu chat channel.

Skill content
"channel": "feishu"
Recommendation

Confirm the Feishu channel is the intended place for these task reminders and avoid including highly sensitive details in chat.