Turnip Prophet

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears purpose-aligned for Animal Crossing turnip predictions, with disclosed optional reminders that use local cron jobs and your existing OpenClaw messaging identity.

The core predictor looks safe and local. Before enabling reminders, confirm the cron entries, channel, and target, and remember that reminders will send messages using your OpenClaw messaging setup. Review any package-install commands before running them.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running setup commands can change the local Python or system package environment.

Why it was flagged

The skill documents package-manager setup commands, including an unpinned Python dependency and a privileged OS package install for jq.

Skill content
"command": "pip3 install matplotlib" ... "command": "sudo apt-get update && sudo apt-get install -y jq"
Recommendation

Review and run setup commands manually if needed; prefer your normal package-management practices or a virtual environment for Python dependencies.

What this means

Stale or incorrect local memory could lead to wrong predictions or reminders, and reminder setup can store channel and user ID data locally.

Why it was flagged

The skill intentionally uses persistent local memory as authoritative state for predictions.

Skill content
Before doing ANYTHING, read the weekly data file: memory/turnip-week.json ... update `memory/turnip-week.json` immediately
Recommendation

Check or reset the memory files if predictions look wrong, especially at the start of a new week or after reinstalling.

What this means

If reminders are enabled, messages will be sent through the user's configured messaging channels as that user or bot.

Why it was flagged

Optional reminders use existing OpenClaw messaging credentials to send messages on the user's behalf.

Skill content
Automated reminders will be sent as you, using your OpenClaw identity ... using your bot tokens or API credentials
Recommendation

Enable reminders only if you are comfortable with automated messages using your existing OpenClaw messaging setup; verify the channel and target before saving config.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

Configured cron jobs can keep sending reminder messages until the cron entries are removed.

Why it was flagged

The cron handler performs scheduled message sending through OpenClaw using locally stored configuration.

Skill content
"$OPENCLAW_BIN" gateway call message.send --params "{\"channel\":\"$CHANNEL\",\"target\":\"$TARGET\",\"message\":\"$message\"}"
Recommendation

Review the generated cron entries before enabling reminders and remove them with crontab if you no longer want scheduled messages.