Daily Brief Digest
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill appears to support a real daily digest, but it can read your configured email/calendar accounts and keep permanent daily logs without a clear permission or retention boundary.
Review this skill before installing if your email or calendar data is sensitive. Use it only with the intended himalaya/gog profiles, avoid enabling the cron job unless you want recurring automatic runs, and periodically delete or restrict access to ~/.openclaw/cron/DailyDigest_logs if you do not want permanent daily records.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the script may read recent email metadata from the default himalaya account.
The script executes a local shell command. The command is constant and matches the documented email-digest workflow, but it still grants the skill local command execution against the user's configured mail CLI.
const output = execSync('himalaya --output json envelope list --page-size 20').toString();Use only with a trusted himalaya configuration and consider passing preselected email data into the script instead of allowing it to fetch mail itself.
The agent may access the default local email and calendar accounts rather than only a specifically approved mailbox or calendar.
The skill uses local account-backed CLI tools for email and calendar access. The artifacts do not clearly bind which account/profile/calendar will be used, while the registry metadata declares no primary credential or required binaries.
It relies on locally configured tools (`himalaya` for email and `gog` for calendar) ... Use `himalaya --output json envelope list --page-size 20` ... Use `gog calendar events [calendarId]`
Before enabling, configure himalaya/gog to a limited intended account, document the required binaries and credential scope, and require user confirmation for the account/calendar used.
Private daily summaries can accumulate on disk and may later be exposed, searched, backed up, or reused as context.
The digest can include email, calendar, task, and news details, and the skill explicitly persists the report permanently without describing retention, cleanup, or an opt-out.
CRITICAL: The script automatically saves this report as a permanent Markdown file in `.openclaw/cron/DailyDigest_logs/[date].md` for historical record.
Add a clear retention policy, an opt-out for logging, a cleanup command, and warnings that email/calendar/task details will be stored locally.
If the user adds the cron job, the digest can continue running every morning until the scheduled task is removed.
The cron setup is user-directed documentation, not automatic installation, but it creates a recurring autonomous agent run that reads account data, writes logs, and sends notifications.
openclaw cron add --name "Morning Digest" --schedule "0 8 * * *" --task "Use the daily-digest skill to generate my morning report and log it." --sessionTarget "isolated"
Only add the cron job deliberately, keep the task prompt narrow, and document how to disable the scheduled run.