Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed daily English lesson scheduler, and its cron delivery and small state file fit that purpose.
Install this if you want scheduled English lessons and are comfortable creating an OpenClaw cron job that sends lesson content to a chat channel you configure. Review the cron time, timezone, recipient chat ID, and explanation language before enabling it.
The manifest says to use the skill for broad requests like "language learning schedule" and includes generic trigger phrases such as "English lesson," "word of the day," and "teach me English daily." These phrases overlap with common user requests and the file provides no exclusion conditions or tighter scope, which could cause unintended invocation.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Create a cron job to deliver daily lessons. Adjust time, timezone, and channel as needed:
openclaw cron add \
The lesson format mandates Chinese translation and Chinese meanings, and the style guidelines state that Chinese explanations target Chinese speakers. This imposes a specific language/locale by default rather than offering user choice or documenting a justified region-specific constraint.
No suspicious patterns detected.