daily-report-bian

PassAudited by ClawScan on May 10, 2026.

Overview

This daily report skill is mostly coherent with its stated purpose, but it reads local OpenClaw chat/memory data, can run on a schedule, and includes an unresolved shell-execution scan signal users should review.

Before installing, verify the actual script path, inspect the full generate.js if possible, and confirm you are comfortable with the skill reading recent OpenClaw sessions/memory and sending an automatic daily summary to Feishu.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your recent memory notes and generated summaries may be reused in future reports or agent context.

Why it was flagged

The skill explicitly reads recent memory files and appends generated report content back into memory, creating persistent context that can affect later use.

Skill content
最近 7 天记忆文件 - 读取 `memory/YYYY-MM-DD.md` ... 报告生成后追加到当天记忆文件
Recommendation

Use this only if you are comfortable with daily summaries being written to OpenClaw memory, and periodically review the memory files for accuracy and sensitive content.

What this means

Content from your Feishu direct chat session can be included in generated daily reports.

Why it was flagged

The code reads local OpenClaw session history and selects the latest Feishu direct conversation as report input.

Skill content
const SESSIONS_DIR = '/root/.openclaw/agents/main/sessions'; ... if (key.includes('feishu:direct') && session.updatedAt)
Recommendation

Avoid using this skill if your Feishu/OpenClaw session history contains information you do not want summarized or reposted.

What this means

The report generation and Feishu push may continue happening daily without a manual prompt each time.

Why it was flagged

The skill is designed to run as a scheduled background task and push reports automatically.

Skill content
Cron 定时任务(已配置) ... 默认推送时间:22:00
Recommendation

Check `openclaw cron list` after installation and disable or edit the job if you do not want automatic daily delivery.

What this means

Reports may be posted through your Feishu identity or configured Feishu channel.

Why it was flagged

The skill sends generated content through Feishu private chat, implying use of the user’s existing Feishu/OpenClaw integration even though no separate credential is declared.

Skill content
推送渠道:飞书私聊
Recommendation

Confirm the intended Feishu recipient/channel and make sure the integration has only the permissions you expect.

What this means

Following the command as written could fail or run a different local file if that path belongs to something else.

Why it was flagged

The manual run command references a hardcoded `daily-report` path, while the evaluated skill slug is `daily-report-bian`; this can cause path confusion if the actual install directory differs.

Skill content
node /root/.openclaw/workspace/skills/daily-report/generate.js
Recommendation

Use the actual installed skill directory for `daily-report-bian` rather than blindly copying the hardcoded path.