ClawHub

Daily Idiom

v1.0.0

每日成语/俗语学习 — 每天一个中文成语或俗语，含故事典故、用法、例句，中英双语，测验打卡，学中文必备。Daily Chinese idiom — story usage examples quiz bilingual EN/CN, perfect for Chinese learners. Trigger on...

⭐ 0· 49·0 current·0 all-time
by@jiajiaoy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (daily idioms + scheduled pushes) align with the included scripts and SKILL.md. The provided push-toggle, morning-push, and evening-push scripts implement scheduling and content generation; nothing requested is out of scope for a push/learning skill.
ℹ
Instruction Scope
SKILL.md instructs using node scripts to enable/disable pushes. The scripts print special __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ markers (used to register/unregister scheduled jobs) and write per-user JSON under data/users. They do not read other system files, environment variables, or call external network endpoints. Note: enabling pushes results in autonomous scheduled runs of the included scripts.
✓
Install Mechanism
Instruction-only with included JS files; no install spec, no package downloads, and no third-party dependencies in package.json. No risky installers or remote fetches present.
✓
Credentials
Skill declares no required environment variables or external credentials. The code does not request secrets; it only reads/writes local per-user JSON files and validates userId inputs. UserId sanitization prevents path traversal and enforces a tight character set.
ℹ
Persistence & Privilege
always:false (normal). When enabled, the skill writes per-user config to data/users and emits scheduler registration markers so the platform will run the scripts on a schedule. This gives the skill recurring autonomous execution (as expected for push notifications) — the user must opt-in to enable it.
Assessment
This skill appears to do what it says: generate and schedule short Chinese idiom content. If you enable pushes (node push-toggle.js on <userId>), the skill will create a JSON file under data/users/<userId>.json and emit scheduler markers so the platform will run the morning/evening scripts automatically; it does not request API keys or make outbound network calls itself. Before enabling: (1) confirm you trust the host/agent that will execute scheduled jobs (these will run autonomously once scheduled), (2) review the data/users directory on your system if you have privacy concerns (it will store scheduling/channel preferences and pushEnabled), and (3) choose the correct delivery channel (telegram/feishu/slack/discord). If you do not want recurring autonomous runs, do not run the 'on' command.

Like a lobster shell, security has layers — review code before you run it.

latestvk978ptnf41pcgxryhctmk8v62d844b6s

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments