moon-daily-report-plugin

The plugin is internally consistent with its stated purpose: it generates a Reddit+Bluesky daily report by invoking a user-provided local script; it does not request unrelated credentials or download remote code.

This plugin is coherent with its description, but it executes a local Node script (default: ~/.openclaw/daily-report/generate-reddit-bluesky-report.mjs). Before installing: (1) Review the code of that script and keep it in a trusted location; (2) avoid placing secrets in the gateway/agent environment (they will be visible to the child script); (3) set DAILY_REPORT_SCRIPT/DAILY_REPORT_DIR explicitly if you want a non-default path and lock file permissions; (4) if you schedule it (cron), ensure the agent runs with least privilege. If you cannot audit the external script, do not enable automated runs.