Educlaw Ielts Planner
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: educlaw-ielts-planner Version: 1.0.1 The EduClaw IELTS Planner is a highly functional study management skill that integrates Google Calendar (via gcalcli), SQLite for progress tracking, and Discord/Telegram for notifications. While it utilizes powerful capabilities including shell execution for database management and timezone detection, as well as automated cron jobs for study reminders, these actions are strictly aligned with the stated purpose of the skill. The instructions to the agent to operate 'silently' regarding internal reasoning are clearly intended for user experience (cleaner chat output) rather than obfuscating malicious activity, and the bundle includes extensive, legitimate documentation (SKILL.md, SETUP.md, schema.sql) with no evidence of data exfiltration or unauthorized access.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can use your authenticated Google Calendar session to inspect availability and create study events.
The skill uses the local gcalcli OAuth credential store to read and write Google Calendar data, which is expected for calendar scheduling but grants meaningful account access.
"path": "~/.gcalcli_oauth", "access": "read-write", "description": "Google OAuth credentials file created and used by gcalcli."
Use a dedicated calendar or account if possible, review the OAuth scope, and revoke gcalcli access if you stop using the skill.
Approved plans can result in calendar events being created without an additional gcalcli prompt.
The workflow can create Google Calendar events using gcalcli. The artifacts include approval gates before this action, so the tool use is purpose-aligned but still changes a third-party account.
DO NOT proceed to Step 2 until user confirms. ... gcalcli --nocolor add --noprompt
Review the proposed plan carefully before approving calendar creation, and verify the created events afterward.
If you enable cron jobs, the agent may periodically read study/calendar state and post reminders or reports without a fresh prompt.
The skill supports persistent scheduled automation. It is disclosed and appears user-configured, but it can keep running after initial setup.
### Cron (Automated — no user trigger needed)\n- Daily study reminders → delivered to Discord\n- Weekly progress reports → delivered to Discord
Only enable the cron jobs you actually want, review their messages and schedules, and remove them when no longer needed.
Your study history, scores, weak areas, vocabulary, and materials may be saved locally and reused across sessions.
The skill persists study progress and uses it in future planning and reports. This is expected for a study tracker, but it creates stored personal context.
SQLite Progress Database — Local `educlaw.db` with sessions, vocabulary, materials, and weekly summary tables
Keep the workspace private, back up or delete the database as appropriate, and avoid storing sensitive non-study information in the plan.
Study reminders, progress reports, or calendar-conflict information could be visible to anyone with access to the configured channel.
The skill can send progress and reminder content to Discord, with optional Telegram support. This is part of the stated reminder feature but moves personal study data into chat channels.
"host": "discord.com", "purpose": "Send study reminders and progress notifications via Discord bot."
Use a private Discord or Telegram channel, restrict bot permissions, and avoid posting sensitive calendar details to shared servers.
Following the setup guide may install software from the network onto your machine.
The setup guide includes user-directed external installer/package commands. They are not automatically executed by the skill, but they rely on external sources.
curl -fsSL https://get.openclaw.dev | bash
Review installer sources, prefer official package managers or pinned versions where possible, and avoid running commands you do not trust.