Birthday

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Personal information about family, colleagues, or relatives will be saved on disk and may remain there until manually deleted.

Why it was flagged

The skill stores names, relationships, phone numbers, birthdays, anniversaries, and notes in persistent local JSON files.

Skill content
"phone": "0912345678", "birthday_solar": "1955-03-15", ... "notes": "喜歡喝普洱茶"
Recommendation

Only store information you are comfortable keeping locally, and protect or back up the OpenClaw workspace appropriately.

What this means

Birthday or anniversary reminders may continue running until disabled or removed.

Why it was flagged

The skill is intended to create and update scheduled reminder tasks that persist beyond the current chat.

Skill content
並用 OpenClaw cron 設置自動提醒 ... tools: mcp__scheduled-tasks__create_scheduled_task ... update_scheduled_task
Recommendation

Review scheduled tasks periodically and delete reminders you no longer want.

What this means

In a shared OpenClaw or bot deployment, incorrect or missing session identification could cause data to be stored under the fallback 'default' user area.

Why it was flagged

The skill uses a local session identifier or session file to determine which user's data directory to access.

Skill content
讀取環境變數或 session context 取得用戶 ID ... session_file = os.path.expanduser("~/.openclaw/session.json")
Recommendation

For multi-user use, configure a reliable per-user session key and avoid relying on the default session value.

What this means

If the dependency is installed manually, the exact package version may vary.

Why it was flagged

The skill references an external Python package for lunar-date conversion, but there is no install spec and the dependency is range-based rather than pinned.

Skill content
dependencies: python: - name: lunardate version: ">=0.2.2" ... # pip install lunardate
Recommendation

Install dependencies from trusted package sources and consider pinning a known-good version if reproducibility matters.