daily_summary

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears to do what it says, but it uses private local chat/browser activity and can set up automatic Feishu posting, so users should review the destination and permissions.

Install only if you are comfortable with the skill reading local OpenClaw memory and Chrome/Edge history to create a work summary. Configure Feishu with minimal permissions, run the script manually first to verify the output, and only add the cron schedule if automatic weekday posting is desired.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private work activity and browsing context may influence the generated summary and could be reflected in what is later sent to Feishu.

Why it was flagged

The skill explicitly uses local OpenClaw memory/chat records and browser history as inputs, which are private context sources even though this matches the daily-summary purpose.

Skill content
- 读取本地聊天记录(memory 文件)
- 读取浏览器历史(Chrome/Edge)
Recommendation

Run it manually first, inspect the summary, and only use the schedule if you are comfortable with these local sources being used.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

After setup, summaries may be generated and posted on a schedule without a fresh approval each day.

Why it was flagged

The documented setup creates a recurring weekday automation that sends or triggers the summary workflow through the Feishu channel.

Skill content
openclaw cron add --schedule "30 17 * * 1-5" --message "生成今日工作总结" --channel feishu
Recommendation

Use a test/private Feishu channel first and keep track of how to remove or disable the cron job if you no longer want automatic posting.

What this means

If the bot is over-privileged or pointed at the wrong channel, work summaries could be posted to unintended recipients.

Why it was flagged

Feishu bot credentials are documented as needed for sending messages, giving the automation delegated posting ability in the configured Feishu context.

Skill content
需要配置飞书机器人 ... "appId": "your-app-id", "appSecret": "your-app-secret"
Recommendation

Use a least-privileged Feishu bot, restrict its channel access, and rotate the secret if it is exposed.