Smart Daily Assistant
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: smart-daily-assistant Version: 1.0.0 The skill bundle is designed to be a local-only personal assistant. It explicitly and repeatedly states that it makes no external API calls, no network requests, and sends no data to any server. All data operations are confined to the `~/.openclaw/smart-daily-assistant/` directory. The `read` and `write` permissions requested in `_meta.json` are justified and explicitly scoped within the `SKILL.md` documentation. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or instructions for prompt injection against the agent that would lead to harmful actions; instead, the instructions actively constrain the agent to benign, local operations.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The assistant can create and update its own local data files for reminders, notes, and settings.
The skill asks for local file read/write capability to initialize and update its JSON data. The behavior is disclosed and scoped to the skill directory, so it is purpose-aligned rather than suspicious.
metadata: {"clawdbot":{"emoji":"💬","requires":{"tools":["read","write"]}}} ... Only reads/writes files under `~/.openclaw/smart-daily-assistant/`Install only if you are comfortable with the assistant maintaining local files under ~/.openclaw/smart-daily-assistant, and periodically review or delete that folder if needed.
Personal details you save through the assistant may remain available to the skill in later sessions.
The skill persists personal assistant data locally, including reminders, notes, contacts, and activity history, so that information can be reused across future interactions.
All data stored under `~/.openclaw/smart-daily-assistant/`: ... `reminders.json` ... `notes.json` ... `contacts.json` ... `history.json`
Avoid storing highly sensitive information unless you want it persisted locally, and delete the skill’s data directory when you no longer want that history retained.