Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward daily-summary helper that reports token usage and writes a dated summary file, with no evidence of hidden or malicious behavior.
Install this if you want Chinese daily summaries that include OpenClaw token usage. Be aware it writes a persistent dated Markdown file under your OpenClaw workspace memory directory and may update that day's existing summary.
The skill is authored in Chinese and presents Chinese-language behavior/output without offering any user language choice or opt-in. While this is not a classic security exploit, it can impair informed consent and safe use because warnings, side effects, and generated content may be missed or misunderstood by users operating in another language.
The skill explicitly creates or updates a file under the user's workspace, but the description does not clearly warn the user that invoking the skill will write to disk and may overwrite an existing daily summary. Hidden or insufficiently disclosed file modification is dangerous because users may trigger the skill expecting a read-only summary action, leading to unintended persistence, loss of prior notes, or workspace tampering.
The package description is written as a Chinese-only skill description and indicates the skill is for generating daily summaries and reports in that language context, without any indication that users can choose another language or locale. This may violate a language/locale policy if the organization requires user choice rather than implicit language forcing.
No suspicious patterns detected.
