Productivity Bot

Automation bot for productivity tasks including data processing, scheduled notifications, and workflow optimization.

Security Scan

The SKILL.md claims a Python package and multiple notification integrations that require API keys and installs, but the skill provides no code, no install instructions, and declares no required credentials — this mismatch is suspicious and needs clarification before use.

Purpose & Capability

The description promises CSV/Excel processing, scheduled tasks, email/Slack/Discord notifications and webhooks — capabilities that normally require a Python package, network access, and specific API credentials. The registry metadata declares no required env vars, no primary credential, no install, and there is no source/homepage. That lack of declared dependencies and provenance is inconsistent with the stated purpose.

Instruction Scope

SKILL.md includes example code that imports 'productivity_bot', reads 'dirty_data.csv', and sends reports, implying the agent should read local files and contact external services. However the instructions do not specify which files, where scheduled tasks run, or which credentials/endpoints to use. The agent could be left to request or access credentials/files opportunistically — the runtime scope is under-specified.

Install Mechanism

There is no install spec and no code files. That is low-risk from an installation perspective, but inconsistent: the docs reference a Python library ('productivity_bot') yet provide no guidance on how to obtain it (pip, source repo, etc.). This gap makes the skill non-functional as-is and may lead an agent or user to install unvetted packages ad-hoc.

Credentials

SKILL.md states 'Various API keys' but the skill declares none. Services mentioned (email SMTP, Slack, Discord, custom webhooks) typically require distinct secrets/tokens; requesting none in metadata but requiring them at runtime is disproportionate and ambiguous. An agent might prompt for or attempt to use arbitrary credentials.

Persistence & Privilege

always:false and no install/persistence behavior are appropriate; the skill does not request elevated persistence or modify other skills. Autonomous invocation is allowed by default (not flagged on its own).

What to consider before installing

This skill's README describes functionality that requires a Python package and multiple API keys, but the package and any install/auth details are missing. Before installing or enabling this skill: 1) ask the publisher for the source code or a trustworthy homepage/repo; 2) request a concrete list of required environment variables and exact install instructions (pip package name or repo URL); 3) confirm where scheduled tasks run and how credentials (email/Slack/Discord tokens) are stored/used; 4) avoid entering secrets until you verify the code and origin. If the publisher cannot provide these details, treat the skill as untrusted or non-functional.

Automation bot for everyday productivity tasks.

Features

1. Data Automation

• Auto-process CSV/Excel files
• Data transformation pipelines
• Report generation

2. Scheduled Tasks

• Daily reminders
• Periodic data syncs -定时报告

3. Notifications

• Email alerts
• Slack/Discord messages
• Custom webhooks

Usage

from productivity_bot import Scheduler, DataProcessor

# Schedule a task
scheduler = Scheduler()
scheduler.every day.at("9:00").do(send_report)

# Process data
processor = DataProcessor()
processor.clean("dirty_data.csv").export("clean_data.csv")

Requirements

• Python 3.8+
• Various API keys