Openclaw Coach

OpenClaw 私人教练 - 每日文档同步+技巧教学。用于 (1) 每天自动从官网同步最新文档到 Obsidian 知识库 (2) 每天早上 7:21 发送 OpenClaw 使用技巧 (3) 每天晚上 21:05 让用户选择想了解的技巧主题 (4) 检测 OpenClaw 版本更新并提醒

Security Scan

The skill's scripts largely match its stated purpose (sync docs, pick/send tips), but it fails to declare required binaries and environment variables (e.g., openclaw, jq, FEISHU_USER_ID), and there are a few behavioral bugs/assumptions that make its requirements and runtime behavior incoherent.

Purpose & Capability

Name/description (sync docs, daily tips, version checks) match the bundled scripts: sync-docs.sh downloads GitHub docs and release tag; pick/send scripts choose and send tips. So core purpose is consistent with code, but the skill fails to declare several real runtime requirements (openclaw CLI, jq, curl) and assumes specific local paths (~/.openclaw and $HOME/Obsidian).

Instruction Scope

Runtime instructions and scripts read/write files under $HOME/Obsidian/Docs/OpenClaw and ~/.openclaw, fetch content from raw.githubusercontent.com and api.github.com, and call the local openclaw CLI to send messages. The scripts also require FEISHU_USER_ID env var to target the recipient but SKILL.md does not declare this. The scripts do not access unrelated system secrets, but the undeclared env/binary usage is a scope/visibility problem.

Install Mechanism

No install spec (instruction-only). The repo includes scripts that will run if invoked, but nothing is downloaded or installed by the skill itself. This is lower risk than arbitrary remote installs, but the skill assumes the presence of external binaries (openclaw, jq, curl) which should have been declared.

Credentials

The scripts require a FEISHU_USER_ID environment variable and implicitly require the openclaw CLI and jq; none of these are declared in the skill metadata. Requesting a single user ID for messaging is proportionate to sending tips, but the omission of these requirements is an incoherence that could mislead users about what credentials/permissions are needed. The skill also accesses the network (GitHub) to fetch docs and releases — expected for syncing but worth disclosing.

Persistence & Privilege

always is false and the skill does not request elevated or system-wide privileges. It writes only to user-local paths ($HOME/Obsidian and ~/.openclaw) and does not alter other skills or global agent settings.

What to consider before installing

This skill generally does what it claims (sync docs, pick/send tips), but pay attention before installing: - It requires external binaries that are not declared: openclaw (used to send messages), jq (used to parse JSON), and curl (used to download docs). Confirm those are available and trustworthy. - The scripts expect a FEISHU_USER_ID environment variable to be set; the skill metadata does not declare or request this. Without it, the send/pick scripts will fail. - The skill reads/writes files under $HOME/Obsidian/Docs/OpenClaw and ~/.openclaw/skills/openclaw-coach — ensure you are comfortable with those paths being modified. - The sync script fetches content from GitHub (raw.githubusercontent.com and api.github.com). If you need to control network access or vet content, review the listed doc paths and the downloaded content. - There are minor bugs/quirks (e.g., pick-daily-tip writes only the first selected tip into daily-tips.json) — review scripts for correctness before enabling automated runs. Recommendations: inspect and test scripts locally in a safe environment; declare and provide only the minimum environment variables needed (use a dedicated message target/bot ID rather than personal tokens if possible); ensure openclaw and jq come from trusted sources; ask the publisher to update SKILL.md/metadata to list required binaries and env vars.

OpenClaw 教练

你的私人 OpenClaw 教练，负责文档同步和每日技巧教学。

定时任务

时间	任务	脚本
03:21	文档同步	scripts/sync-docs.sh
21:05	技巧选择	scripts/pick-daily-tip.sh
07:21	发送技巧	scripts/send-daily-tip.sh

知识库结构

Obsidian/Docs/OpenClaw/
├── docs/                    # 官方文档
│   ├── gateway.md
│   ├── channels.md
│   └── ...
├── tips/                    # 技巧文章
│   ├── gateway-使用指南.md
│   ├── message-发送消息.md
│   └── ...
├── daily-tips.json         # 每日技巧选择
├── tips-log.md             # 发送日志
└── latest-version.txt      # 当前版本

技巧文章模板

# 技巧标题

## 简介
简短介绍这个技巧是什么

## 使用场景
- 场景1
- 场景2

## 详细步骤
1. 步骤一
2. 步骤二

## 示例
\`\`\`bash
openclaw gateway start
\`\`\`

## 注意事项
- 注意1

用户交互流程

1. 晚上 21:05: 发送3个技巧选项让用户选择
2. 用户回复数字: 记录选择
3. 早上 7:21: 发送选中技巧的详细内容 + 版本更新（如有）

事件处理

当收到以下系统事件时，自动执行对应操作：

事件	动作
sync	执行 scripts/sync-docs.sh
pick-tip	执行 scripts/pick-daily-tip.sh
send-tip	执行 scripts/send-daily-tip.sh

手动命令

• /sync - 立即同步文档
• /tip - 查看今日技巧
• /tips list - 查看所有可用技巧