Daily Planner
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: daily-planner Version: 1.0.0 The skill bundle describes a comprehensive daily planner with extensive capabilities, including system-level interactions like enabling 'DND mode', 'auto-reply', and accessing sensitive data such as email and emergency contacts. While these features are presented as legitimate for a productivity tool, they inherently carry high risk due to the broad permissions and system integration required. The `SKILL.md` metadata declares `"bins":[]`, indicating no external binaries are needed. However, the instructions for the agent to perform actions like 'All notifications paused (if agent has control)' or 'Find coverage (grandparent/sitter contacts ready)' imply a need for privileged access that, if not handled by secure, sandboxed platform APIs, could lead to the agent attempting less secure methods or exploiting platform vulnerabilities. There is no clear evidence of malicious intent, but the breadth of risky capabilities makes it suspicious.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Personal commitments, names, deadlines, and context from conversations may be saved and reused in later planning sessions.
The skill is designed to extract commitments from conversations and store them for future reminders and planning, creating persistent memory of personal or work obligations.
Every promise or commitment made in conversation
Review the ~/planner/ files periodically, avoid logging highly sensitive commitments unless needed, and delete or archive stored data when it is no longer useful.
If connected to calendar or email tools, the agent could read scheduling and message metadata relevant to planning.
The skill may rely on delegated access to calendar and email data if those integrations are available, which is expected for a planner but involves sensitive account information.
Input sources: - Calendar events for today - Open commitments from `commitments.md` - Pending tasks from previous day - Emails flagged as "needs decision" (if email access)
Grant only the minimum calendar/email permissions needed, and confirm which accounts and folders the agent may use.
The planner may add calendar blocks or, where integrations exist, affect notifications or auto-replies as part of protecting focus time.
The calendar workflow allows automatic creation of deep-work blocks when time is available; this is aligned with the skill purpose but can mutate a user’s calendar.
If open: block automatically
Require confirmation before externally visible changes such as creating calendar events, rescheduling meetings, sending summaries, or enabling auto-replies.