Daily Movie

Daily movie & TV recommendation — curated by genre, mood, or theme. One great watch per day with synopsis, streaming platform, and audience ratings.

Security Scan

The skill's code, instructions, and requirements are consistent with a daily movie-recommendation and push-scheduling utility and do not request unrelated secrets or install remote code.

Purpose & Capability

Name/description match the included files: scripts generate daily recommendation prompts and manage push scheduling; required resources (none) are appropriate for a recommendation/push skill.

Instruction Scope

SKILL.md and the push scripts are narrowly scoped to generating recommendation prompts and scheduling pushes. The morning/evening scripts only print natural-language prompts (they do not perform web requests themselves), but those prompts ask the agent to "search" for ratings/platforms — so the agent or runtime will perform lookups. This is expected for a recommendation skill but worth noting: the actual web searches/rating lookups happen outside these scripts (by the agent or integrated tools).

Install Mechanism

No install spec; code is included but there is no download/extract step or external package installation. This minimizes install-time risk.

Credentials

The skill declares no environment variables, credentials, or config paths. The scripts only read/write per-skill user JSON files under a local data/users directory and do not access unrelated secrets or system credentials.

Persistence & Privilege

always is false (normal). The skill can enable scheduled pushes by emitting __OPENCLAW_CRON_ADD__ markers that the platform likely consumes; it also writes per-user JSON under data/users. These are expected behaviors for a push-capable skill but grant the skill the ability to schedule autonomous messages — review who can run push-toggle and which channels are used.

Assessment

This skill appears coherent for daily movie recommendations. Before installing: (1) confirm you trust the skill owner because it can schedule autonomous pushes (it prints special __OPENCLAW_CRON_ADD__ lines the platform uses to create cron jobs); (2) inspect or monitor the data/users directory (the skill writes simple per-user JSON there) to ensure no sensitive data is stored; (3) be aware that the scripts print prompts that instruct the agent to "search" for ratings/platform availability — those searches will be performed by your agent/runtime or connected tools, so if you restrict web access or external connectors you’ll control where lookups happen; (4) there are no requested environment secrets or remote installs in the package. If you want tighter control, keep the skill disabled until you manually run push-toggle and review cron additions.

每日影视推荐

每日影视推荐 — 今日精选 · 评分推荐 · 观影指南 · 中英双语

何时使用

• 用户说"今晚看什么""电影推荐""推荐部电影"
• 用户说"what to watch""movie recommendation"
• 用户说"好看的剧""最近有什么新片"
• 用户说"Netflix推荐""豆瓣高分""IMDb top"

---

推送管理

node scripts/push-toggle.js on <userId>
node scripts/push-toggle.js on <userId> --morning 10:00 --evening 19:00 --channel feishu
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>

支持渠道：telegram / feishu / slack / discord