OpenClaw Coach

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill mostly matches its coaching purpose, but it automatically sends messages and local tip content to a hard-coded OpenClaw recipient that may not be the installing user.

Before installing, confirm that the hard-coded recipient ID is yours and that you are comfortable with recurring automatic messages. If this skill is meant for general use, the recipient should be configurable and outbound sends should be confirmed or clearly scoped.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI03: Identity and Privilege Abuse

What this means

If the hard-coded target is not you, the skill could send messages from your OpenClaw account to someone else on its schedule.

Why it was flagged

The script uses OpenClaw messaging authority to send from the user’s environment to a fixed target ID. The artifacts do not explain who this target is or make it configurable.

Skill content

openclaw message send --target "ou_6492d43062b301922db4bb3b91f2c22a" --message "$MESSAGE"

Recommendation

Require the recipient to be configured by the installing user, disclose the target identity clearly, and ask for confirmation before recurring sends.

Medium

#ASI07: Insecure Inter-Agent Communication

What this means

Local note content in the OpenClaw tips folder could be sent to an unintended recipient.

Why it was flagged

The script reads local Obsidian tip content and sends it through OpenClaw messaging to the same hard-coded recipient, creating an unclear data boundary.

Skill content

TIP_CONTENT=$(cat "$OBSIDIAN_PATH/tips/$TIP.md" 2>/dev/null)
...
openclaw message send --target "ou_6492d43062b301922db4bb3b91f2c22a" --message "$MESSAGE"

Recommendation

Verify the recipient before sending, restrict which local files can be included, and avoid automatic outbound messages until the user has approved the destination.

Low

#ASI10: Rogue Agents

What this means

The skill may continue sending daily prompts or tips when its heartbeat mechanism is active.

Why it was flagged

The skill is designed to run recurring timed actions. This is disclosed and aligned with the coach use case, but it is persistent automation users should notice.

Skill content

如果是 07:21 ±5min - 执行 send-daily-tip.sh
如果是 21:05 ±5min - 执行 pick-daily-tip.sh

Recommendation

Install only if you want recurring reminders, and ensure you know how to disable the heartbeat or scheduled events.