Security checks across malware telemetry and agentic risk
This daily briefing skill appears purpose-aligned, but it automatically sends generated files to a CEO and uses broad shell-based commands without clear approval or permission boundaries.
Review before installing. Use it only if you explicitly want automated CEO briefings, verify the recipient configuration, and prefer a draft or approval mode before messages and attachments are sent. The shell-command implementation should be tightened before use in a sensitive workspace.
# 7. 发送简报给CEO
try:
send_cmd = f'openclaw tool call message --action send --target "{CONFIG["receiver"]}" --message "【每日早会简报 {today}】请查收今日最新资讯汇总。" --media "{full_path}"'
subprocess.run(send_cmd, shell=True, capture_output=True, text=True)
print("简报已成功发送给CEO")
except Exception as e:
print(f"发送简报失败: {str(e)}")for query in search_queries:
try:
cmd = f'openclaw tool call web_search --query "{query}" --count {CONFIG["search_count"]}'
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, encoding="utf-8")
if result.returncode == 0:
search_data = json.loads(result.stdout)
all_news.extend(search_data.get("results", []))65/65 vendors flagged this skill as clean.