Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Urban Daoist Navigator
v4.0.0Triggers when the user (programmers, founders, traders, students) asks for daily planning, a morning routine, "what's the vibe," or mental framing for the da...
⭐ 0· 94·0 current·0 all-time
by@jkzfhq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, and the SKILL.md consistently describe a daily-planning, mindfulness guide for urban professionals; no unrelated binaries, env vars, or config paths are requested.
Instruction Scope
The SKILL.md directs the agent to "synthesize the day's underlying data (calendar, weather, astrological shifts as metaphors)" but does not enumerate the precise data sources, connectors, or permissions required. That ambiguity can lead the agent to query user's calendar, location, or other personal data unless platform-level permissions are constrained. Otherwise the behavioral instructions stay within the advertised scope.
Install Mechanism
No install spec and no code files are executed; this instruction-only skill will not write or install artifacts onto the host system.
Credentials
The skill declares no environment variables, credentials, or config paths. The only potential data needs implied by the instructions are user calendar and local weather/location, which are reasonable for a personalized daily guide but are not explicitly declared.
Persistence & Privilege
always is false; the skill does not request persistent or elevated presence, nor does it include installation steps that would modify other skills or system-wide settings.
What to consider before installing
This skill appears to be what it says (a Daoist-flavored daily planning guide) and has no install or secret requirements, but the instructions are vague about data sources. Before enabling: confirm which connectors the agent will use (calendar, location/weather, email, etc.) and grant the minimum necessary permissions (e.g., read-only access to a specific calendar rather than broad account access). Avoid giving it access to unrelated data stores (files, cloud drives, payment tokens). Verify the author/homepage if you care about provenance. If you plan to rely on its trading advice, treat it as philosophical guidance only — do not feed live credentials or make automated trades without separate, explicit controls.Like a lobster shell, security has layers — review code before you run it.
daily-routinevk970dmftzm0fvjrt8gw8je2rjx836hybdaoismvk970dmftzm0fvjrt8gw8je2rjx836hyblatestvk970dmftzm0fvjrt8gw8je2rjx836hybmindfulnessvk970dmftzm0fvjrt8gw8je2rjx836hybphilosophyvk970dmftzm0fvjrt8gw8je2rjx836hybproductivityvk970dmftzm0fvjrt8gw8je2rjx836hyb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.