DNFM周本进度追踪

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a local DNFM progress tracker that only updates its own JSON state files, with a small data-loss caveat around its automatic reset behavior.

This looks safe for a local game-progress tracker. Before installing, note where it stores its JSON files and be aware that the current auto-reset implementation may clear same-day progress more than once on scheduled refresh days.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Info

#ASI06: Memory and Context Poisoning

What this means

Your DNFM progress and configuration are saved locally and reused on later runs.

Why it was flagged

The script stores persistent progress and configuration data in fixed local JSON files, matching the stated tracker purpose.

Skill content

PROGRESS_FILE = "/root/.openclaw/workspace/dnfm-tracker/progress.json"
CONFIG_FILE = "/root/.openclaw/workspace/dnfm-tracker/config.json"

Recommendation

Install only if you are comfortable with the skill maintaining local tracker state in those files; back them up if the progress data matters.

Low

#ASI08: Cascading Failures

What this means

Progress entered on a refresh day may be reset again when the tool is run later that same day.

Why it was flagged

The reset logic writes a last_reset date but does not check it before resetting, so every invocation after 6 AM on a refresh day can overwrite that event's progress back to zero.

Skill content

if weekday == refresh_day and now.hour >= refresh_hour:
    data["progress"][key] = {"done": 0, "total": config["total"]}
    data["last_reset"][key] = now.strftime("%Y-%m-%d")
    save_progress(data)

Recommendation

Review or patch the reset logic to skip resetting if last_reset for that event already equals today.