v1.1.0

DNFM周本进度追踪

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:38 AM.

Analysis

This skill appears to be a local DNFM progress tracker that only updates its own JSON state files, with a small data-loss caveat around its automatic reset behavior.

GuidanceThis looks safe for a local game-progress tracker. Before installing, note where it stores its JSON files and be aware that the current auto-reset implementation may clear same-day progress more than once on scheduled refresh days.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Cascading Failures

SeverityLowConfidenceHighStatusNote

scripts/tracker.py

if weekday == refresh_day and now.hour >= refresh_hour:
    data["progress"][key] = {"done": 0, "total": config["total"]}
    data["last_reset"][key] = now.strftime("%Y-%m-%d")
    save_progress(data)

The reset logic writes a last_reset date but does not check it before resetting, so every invocation after 6 AM on a refresh day can overwrite that event's progress back to zero.

User impactProgress entered on a refresh day may be reset again when the tool is run later that same day.

RecommendationReview or patch the reset logic to skip resetting if last_reset for that event already equals today.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityInfoConfidenceHighStatusNote

scripts/tracker.py

PROGRESS_FILE = "/root/.openclaw/workspace/dnfm-tracker/progress.json"
CONFIG_FILE = "/root/.openclaw/workspace/dnfm-tracker/config.json"

The script stores persistent progress and configuration data in fixed local JSON files, matching the stated tracker purpose.

User impactYour DNFM progress and configuration are saved locally and reused on later runs.

RecommendationInstall only if you are comfortable with the skill maintaining local tracker state in those files; back them up if the progress data matters.