日用品保质期管理

PassAudited by ClawScan on May 12, 2026.

Overview

This skill is purpose-aligned for managing shelf-life records in Feishu, but users should notice that it creates a Feishu table and a daily reminder job on first use.

Before installing, be aware that the first relevant use may create a Feishu Bitable and a daily 9:00 reminder job. This matches the skill’s purpose, but you should only use it if you want the agent to manage these Feishu resources and recurring reminders.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

On first use, the agent may create a Feishu Bitable app, table, fields, views, and config without a separate confirmation step.

Why it was flagged

The skill will automatically create Feishu Bitable resources before the first related operation if it is not initialized. This is disclosed and aligned with setup, but it is still a cloud-account mutation users should notice.

Skill content
当 `config.json` 中 `initialized` 为 false 或 app_token 为空时,**在用户首次触发保质期相关操作前自动执行**
Recommendation

Use the skill only if you want it to create and manage a Feishu Bitable for this purpose; consider adding an explicit confirmation step before initialization.

What this means

The agent can run a daily reminder check at 9:00 and may send Feishu reminders when items are near expiration or expired.

Why it was flagged

The skill creates a persistent daily scheduled agent task for expiration checks. This is central to reminders and is disclosed, but it continues operating after the initial user interaction.

Skill content
调用 `cron` add,创建每日定时检查任务
Recommendation

Make sure you want recurring reminders; the skill should ideally document how to pause or remove the cron job.

What this means

The skill may act in your Feishu workspace to create and manage the table and send reminders tied to your user identity.

Why it was flagged

The skill uses Feishu identity context to transfer ownership and later send reminders to the current user. This is expected for a Feishu-based integration, but it relies on delegated account/workspace authority.

Skill content
多维表格创建后,将所有权转移给当前用户(从消息上下文获取 SenderId)
Recommendation

Install only if you are comfortable granting the agent Feishu Bitable and messaging access needed for this workflow.

What this means

The local config links the skill to the Feishu Bitable and reminder job; if changed incorrectly, the agent may read or update the wrong table.

Why it was flagged

The skill stores persistent app_token, table_id, initialization state, and cron job ID in a local config file. This is scoped to the skill and necessary for reuse.

Skill content
配置文件路径:`~/.openclaw/workspace/skills/shelflife/config.json`
Recommendation

Do not share or manually edit the config unless needed; remove the cron job and config if you stop using the skill.