daily review manager

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a coherent daily-journal/review assistant that stores user-provided reflections locally, with only purpose-aligned privacy and persistence considerations.

This appears safe for its stated purpose. Before installing, decide where dailyreview.md should live, avoid recording secrets or highly sensitive information, and only enable voice transcription, platform message access, or scheduled reminders if you understand and want those features.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your daily reflections, moods, work notes, or personal details may be retained in the workspace file and reused for weekly or monthly summaries.

Why it was flagged

The skill persists daily reflections in a Markdown file for later review and summaries, which is aligned with its purpose but may store sensitive personal content.

Skill content
复盘内容统一存储在 `dailyreview.md` 文件中。存储路径:`{workspace}/dailyreview.md`
Recommendation

Install only if you are comfortable storing this journal data in the workspace; avoid entering secrets or highly sensitive information unless the storage location is appropriate.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If configured, the assistant may continue sending review reminders or generating summaries on a schedule.

Why it was flagged

The skill describes recurring reminders and scheduled weekly/monthly report generation. This is disclosed and expected, but it is still persistent scheduled behavior.

Skill content
复盘提醒:定时提醒用户做复盘... 定时任务:每周日 21:00... 每月最后一天 21:00
Recommendation

Confirm any cron or scheduler setup yourself, and know how to disable the reminders or scheduled summaries if you no longer want them.

What this means

Voice transcription may require installing an additional Python package outside the listed install spec.

Why it was flagged

The skill documents an external Whisper package for voice transcription, while the registry install section has no install spec. This dependency is purpose-aligned but should be installed from a trusted source.

Skill content
whisper | 语音转文字 | pip install openai-whisper
Recommendation

Install dependencies from trusted package sources and verify the package name/version if enabling voice transcription.

What this means

Connecting message platforms could expose review-related messages or voice files to the assistant workflow.

Why it was flagged

The skill may rely on messaging-platform or MCP adapters to retrieve voice messages. This is expected for voice input, but it involves third-party message data boundaries.

Skill content
下载语音文件(飞书/微信等平台)... 微信/Telegram:使用对应平台的 MCP 工具
Recommendation

Authorize only the specific messaging integrations you need, and ensure they are scoped to user-provided review messages where possible.