Daily Mindful

v1.0.0

每日正念冥想引导、呼吸练习与心灵小文,帮助放松减压。Daily mindfulness meditation guide, breathing exercise, and reflection — calm and stress relief. Trigger on:每日正念、冥想、正念、减压、呼吸练习、放松、d...

0· 80·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (daily mindfulness content + optional push) match the included files and instructions. The three scripts implement push scheduling and prompts; the SKILL.md describes generating an HTML artifact — all are coherent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to produce bilingual mindfulness content and an interactive HTML saved to /mnt/user-data/outputs, and the scripts provide CLI controls for enabling/disabling pushes. Instructions do not request unrelated files, env vars, or broad system access.
Install Mechanism
No install spec or external downloads — instruction-only runtime plus included JS scripts. Nothing is fetched from remote URLs or written outside the skill's directory except user data and the specified output path.
Credentials
No required environment variables or external credentials. The scripts read/write JSON records under a local data/users directory and accept sanitized userId inputs; this is proportional to push-management functionality.
Persistence & Privilege
always:false (normal). The push-toggle script emits platform-specific markers (__OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__) to request scheduling of cron jobs that run the morning/evening push scripts — expected for a push feature but notable because it creates recurring automated messages tied to userIds and channels.
Assessment
This skill appears to do what it says: generate bilingual mindfulness content and optionally schedule daily pushes. Before installing, consider: 1) The push feature creates/updates JSON files under the skill's data/users directory and emits scheduling markers to add/remove cron jobs — only enable push for trusted user IDs. 2) No external credentials or network calls are present in the code, but scheduled pushes rely on the platform’s channel integration (telegram/feishu/slack/discord) — ensure those channel integrations are managed by the platform, not embedded here. 3) The generated HTML is saved to /mnt/user-data/outputs/daily-mindful.html — review the output (there's an ad-slot and “Powered by ClawCode” footer) before publishing. Overall the package is coherent and low risk, but be mindful about enabling automated push scheduling and which user IDs you register.

Like a lobster shell, security has layers — review code before you run it.

latestvk976s4qhj4sjwg26g8ndmhw065842qjr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments