Shift Scheduler
v1.0.0Staff shift scheduling and management assistant for retail store managers and employees. Answers shift queries, sends reminders, handles swap requests, and m...
⭐ 0· 84·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the included files: parsing schedules, answering queries, swap/time-off flows, and routing on-call. The shipped parser (scripts/parse_schedule.py) handles CSV/Excel/text input as described. SKILL.md also documents Google Sheets and WeCom Calendar options, but no code or required env vars are provided for those integrations — this is plausible if those sources are expected to be provided via configuration or manual export, but it is an inconsistency to surface.
Instruction Scope
Runtime instructions focus on schedule parsing, validation, reminders, swap/time-off flows, and routing. They reference configuration locations (skills_config.shift-scheduler, permissions_config) and other skills for escalation routing; they do not instruct reading arbitrary system files or access to unrelated credentials. Actions like sending reminders and routing imply outbound messaging, but specific transport/integration steps are not implemented in the included code and would rely on the agent's environment/config.
Install Mechanism
This is an instruction-only skill with a small Python utility file. There is no install spec, no downloads, and no archive extraction. The parser optionally depends on pandas (import guarded) — installing pandas is a normal, expected dependency to parse Excel/CSV.
Credentials
The skill declares no required env vars or primary credential, which is coherent if managers supply files or public sheet links. However SKILL.md references Google Sheets service account access and WeCom API integration (which normally require credentials). The absence of declared env variables for these integrations is either an intentional choice (optional features) or an omission; verify how the integrations are expected to be authenticated before granting credentials.
Persistence & Privilege
The skill is not force-included (always:false) and allows normal autonomous invocation. It does not request to modify other skills or system-wide agent settings. It does mention archiving previous schedules and writing parsed JSON to output — expected behavior for a scheduler.
Assessment
This skill appears to do what it says: parse schedules, validate them, and help with shift queries and swaps. Before installing, confirm the following: (1) How will Google Sheets or WeCom integrations authenticate? If those features are needed, ask the author whether the agent will request service-account keys or OAuth tokens and where those should be stored; avoid giving broad org credentials until you understand scope. (2) Where and how are reminders and notifications sent (WeCom, email, other internal systems)? Ensure the configured endpoints are authorized and audited. (3) Review retention/archiving behavior for schedule files (they contain staff personal info). (4) Running the included parser may require installing pandas/openpyxl to handle Excel; ensure that dependency installation is acceptable. If you need stronger guarantees, request the author to (a) document exactly which env vars/credentials (if any) are required for each integration, (b) provide code or config showing how messages are delivered, and (c) limit required permissions to the minimum (e.g., read-only sheet access or a service account with only calendar read scope).Like a lobster shell, security has layers — review code before you run it.
latestvk97d28v5pzzq71wbqkcf4vn7h183e9n3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📅 Clawdis