Night Routine
v1.0.0Build a restful night routine with wind-down habits, sleep prep, and next-day planning
⭐ 3· 2k·6 current·6 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, and SKILL.md all describe a night/wind-down routine assistant (guided steps, sleep prep, planning, and tracking). There are no extra binaries, env vars, or installs requested that would be out of scope for this purpose.
Instruction Scope
The instructions tell the agent to 'Review tomorrow's calendar' and to provide 'consistency tracking' (weekly/monthly adherence). Those behaviors imply reading calendar data and persisting user routine data, but the SKILL.md contains no details about what data sources will be read, how access is obtained, or where/how data is stored. It also asserts 'All data stays local on your machine' with no implementation detail. This is an ambiguity / scope creep risk: calendar access and persistence are not declared or constrained.
Install Mechanism
No install spec and no code files — this is instruction-only, so nothing is written to disk by the skill bundle itself. That reduces installation risk but also means claims about storage/encryption are purely declarative.
Credentials
The skill declares no required environment variables or credentials, yet it expects to review calendars and track consistency. Accessing calendars normally requires permissions/credentials (calendar service token, OAuth). The lack of declared credentials/config paths is an omission worth questioning.
Persistence & Privilege
No 'always' flag, no install, and model invocation is not disabled (default). That means the agent can invoke this skill when asked, but it does not request permanent presence or elevated deployment privileges in the registry metadata.
What to consider before installing
This skill's description and instructions are coherent at a high level, but it references reading your calendar and storing local encrypted data without specifying how those actions will occur. Before installing, ask the publisher: (1) exactly which external services (calendar providers) the skill will access and how you grant/revoke that access; (2) where routine/tracking data is stored on your device, what encryption is used, and who can read it; (3) whether any data is transmitted off-device or to third-party services; and (4) whether the agent will auto-run any routines or only run when you explicitly invoke them. If you cannot verify these points, avoid connecting sensitive calendars or sharing private details with the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk976dwzmqrmw5a705m7nsw6d897zwjme
License
MIT-0
Free to use, modify, and redistribute. No attribution required.