Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Daily Report

v1.0.0

日报生成技能 - 自动收集数据并生成工作日报

0· 100·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for linzmin/daily-report-cn.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Daily Report" (linzmin/daily-report-cn) from ClawHub.
Skill page: https://clawhub.ai/linzmin/daily-report-cn
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install daily-report-cn

ClawHub CLI

Package manager switcher

npx clawhub@latest install daily-report-cn
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The code implements collecting sample calendar/todo/email data, templating, saving reports, and sending via the local `openclaw` CLI as described. The SKILL.md and PUBLISH-PREVIEW explicitly state the current version uses example data and manual input and plans future integration with real calendars/IMAP/task systems, so the declared capability matches the actual code (no unexplained external services or unrelated credentials are requested).
Instruction Scope
Runtime instructions and scripts operate on local files (data/, reports/) and call the local `openclaw message send` CLI to transmit report content to Weixin — this is expected for a sending feature but does transmit report contents off the machine via whatever `openclaw` is configured to do. The collect-data script may attempt a macOS osascript call (currently falls back to sample data) and always prompts for manual summary input; if used non-interactively (cron), the scripts may block or behave unexpectedly because manual input is not bypassed. No instructions ask the agent to read unrelated secrets or system config files.
Install Mechanism
There is no network download or package installer in the registry metadata; the included install.sh only checks for Node.js, sets permissions, initializes a local data file, and optionally adds a crontab entry. The install script does not fetch remote code or extract archives, so installation risk is low.
Credentials
The skill does not require any credentials to install, but SKILL.md documents optional environment variables (WEIXIN_CHANNEL, WEIXIN_ACCOUNT, WEIXIN_USER_ID) used for sending. These are proportional to the send-to-Weixin feature. Note: the scripts include default WEIXIN account and user IDs; if the `openclaw` CLI is present and configured, running send commands will deliver report contents to those targets unless you override them.
Persistence & Privilege
The skill is not forced-always and does not claim permanent platform presence. install.sh offers to add a cron job (user prompt) to auto-run generation — that is optional and scoped to these scripts. The skill does not modify other skills or system-wide agent configs.
Assessment
This skill is coherent with its stated purpose, but check these before installing: - openclaw CLI: the send functions call `openclaw message send` to deliver report text. Verify what your local `openclaw` CLI does and where it will send messages (to avoid accidental data leaks). - Default targets: the code contains default WEIXIN_ACCOUNT and WEIXIN_USER_ID values. If you don't set your own WEIXIN_* env vars, reports could be sent to those defaults if you run send operations. Override or remove them before sending. - Cron/autonomy: install.sh can add a cron job to run automatically — only add it if you want daily automated runs. Note the auto-run path currently calls the collect script which prompts for manual input; in practice the auto-run may block or behave oddly unless you edit the scripts to run fully non-interactively. - Sensitive content: reports include calendar, todo, and email summaries (even example data). If you later integrate real calendars or email, be mindful that report content could include sensitive information and will be transmitted by the send commands. - Test in a sandbox: run the included tests (npm test / ./tests/test-daily-report.sh) and inspect the code locally. If you plan to enable automatic sending, test with a safe target account first. If you want, I can highlight exact lines where the send command is built, or suggest minimal code changes to make automated cron runs non-interactive and safer (e.g., add an AUTO_MODE check to skip manual prompts and require an explicit --send flag for transmissions).
scripts/auto-report.js:27
Shell command execution detected (child_process).
scripts/collect-data.js:60
Shell command execution detected (child_process).
scripts/generate-report.js:163
Shell command execution detected (child_process).
scripts/send-report.js:45
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk979g94wxkt3e5fxe47y6rwcy583mdnn
100downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

日报生成技能

📊 你的私人日报助手,让写日报变得简单!


🎯 功能特性

  • ✅ 自动收集日历、待办、邮件数据
  • ✅ 多种模板可选(简单/详细/专业)
  • ✅ 支持多种输出格式(Markdown/文本/微信)
  • ✅ 一键发送微信
  • ✅ 自动定时生成(cron)
  • ✅ 历史报告保存和查看

🚀 快速开始

1. 安装

cd ~/.openclaw/workspace/skills/daily-report
./install.sh

2. 收集数据

./scripts/collect-data.js

3. 生成日报

./scripts/generate-report.js --save --send

📋 命令详解

收集数据 collect-data.js

# 收集所有数据
./scripts/collect-data.js

# 单独收集
./scripts/collect-data.js --calendar
./scripts/collect-data.js --todo
./scripts/collect-data.js --email
./scripts/collect-data.js --manual

# 查看已收集数据
./scripts/collect-data.js --output

生成日报 generate-report.js

# 预览
./scripts/generate-report.js

# 保存并发送
./scripts/generate-report.js --save --send

# 使用详细模板
./scripts/generate-report.js --template detailed --save

# 微信格式输出
./scripts/generate-report.js --output weixin --send

发送日报 send-report.js

# 发送今日日报
./scripts/send-report.js

# 发送指定日期
./scripts/send-report.js 2026-03-26

📁 模板示例

简单模板 (simple)

# 工作日报 - 2026-03-26

## 📅 今日工作

- 09:00-10:00 晨会
- 14:00-15:00 项目评审

## ✅ 完成情况

- ✅ 完成日报技能开发
- ⏳ 代码审查

## 📧 邮件处理

收到:15 封
发送:8 封

## 💡 今日总结

今天完成了日报技能的开发...

## 🎯 明日计划

- [ ] 

详细模板 (detailed)

包含更多字段:收获与成长、遇到的问题、改进建议、本周进度表等。


⏰ 自动定时

安装时可选择添加 cron 任务,每天 18:00 自动生成日报:

0 18 * * * /path/to/auto-report.js >> ~/.openclaw/logs/daily-report.log 2>&1

💾 数据存储

数据文件: data/daily-data.json

报告目录: reports/

reports/
├── report-2026-03-26.md
├── report-2026-03-25.md
└── ...

🔧 配置

环境变量

变量默认值说明
WEIXIN_CHANNELopenclaw-weixin微信渠道 ID
WEIXIN_ACCOUNTd72d5b576646-im-bot微信账号 ID
WEIXIN_USER_IDo9cq802hhREiOXPlXq_Tgb0MjPTo@im.wechat接收用户 ID

自定义模板

templates/ 目录创建新模板:

cp templates/simple.md templates/my-template.md
# 编辑 my-template.md

使用:

./scripts/generate-report.js --template my-template

📝 完整文档

详见 SKILL.md


🦆 作者

鸭鸭 (Yaya) - 你的私人日报助手

📄 许可证

MIT-0 License

Comments

Loading comments...