Daily Recipe
v1.0.0每天推荐一道精选菜谱，中西菜式交替，含食材、步骤和精美视觉呈现。Daily recipe recommendation — alternating Chinese and Western cuisines, with ingredients, steps, and visual card. Trigger on：...
⭐ 1· 40·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily recipe) align with the included SKILL.md and the three scripts (morning/evening/push-toggle). The push scripts and the recipe generation instructions match the declared behavior (daily recipe + optional scheduled push).
Instruction Scope
SKILL.md instructs the agent to use web_search to source recipes and to write a single-file HTML to /mnt/user-data/outputs/daily-recipe.html — both reasonable for this purpose. It also intentionally asks for ad placeholder divs and a 'Powered by ClawCode' footer. The push-related instructions emit platform cron-registration markers (__OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__) and read/write JSON under data/users; these are confined to the skill's data area and are consistent with push scheduling.
Install Mechanism
No install specification or external downloads; the skill is instruction-first with small local node scripts. No remote installers or archive extraction observed.
Credentials
The skill requests no environment variables or credentials. The push scripts write local user preference files under a skill-scoped data/users directory; they do not exfiltrate secrets or access unrelated credentials.
Persistence & Privilege
always:false (no forced global presence). The push-toggle scripts register scheduled pushes by printing platform-specific cron registration markers and persist user push settings in data/users. This grants lasting push behavior only if the operator runs the toggle and the platform honors the markers — behavior matches the feature description but is a permanent scheduling action if used.
Assessment
This skill appears to do what it claims: generate bilingual recipe HTML and optionally register scheduled pushes. Before installing, consider: (1) web_search will fetch external recipes — watch for copyright/attribution if you reproduce full recipe text; (2) the push feature writes preference files under data/users and emits cron-registration markers that the platform may honor to schedule messages — only enable pushes for users you trust; (3) no credentials are requested, and no remote code is downloaded, but you should run it in an environment where writing to /mnt/user-data and the skill's data directory is acceptable. If you need stronger assurance, review the platform's handling of the __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ markers and test the scripts in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk979t0ep6cbx6e9r02wzjh4601843xxn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.