water-reminder

Sends hydration and movement reminders every 45 minutes from 8:00 to 23:00 to promote healthy work habits and prevent prolonged sitting.

Security Scan

The skill's behavior (sending periodic reminders and reading/writing state under ~/.openclaw) matches its description, but the instruction file contains suspicious unicode control characters and asks for guidance to modify agent config files — both warrant closer review before installing.

Purpose & Capability

Name and description (periodic hydration/movement reminders) align with the instructions: reading a local state file, checking time, and sending messages to the user's session. The requirement to run on the agent heartbeat is reasonable for periodic reminders, though the skill references agent config files (~/.openclaw/openclaw.json) which are beyond ordinary user-level app files and require care.

Instruction Scope

SKILL.md explicitly instructs reading and writing agent runtime files (memory/heartbeat-state.json) and describes how to modify the agent's heartbeat configuration. While state persistence is expected, editing agent configuration files or relying on USER.md for channel session IDs is sensitive: it gives the skill the ability to send messages into the user's session and to alter agent scheduling. Also the SKILL.md contains detected unicode control characters (possible prompt-injection attempt) which raises risk that displayed instructions may hide or alter content.

Install Mechanism

Instruction-only skill (no install spec, no code). This minimizes risk from external downloads or archives.

Credentials

No environment variables, binaries, or external credentials are requested. The files it reads/writes are local to the agent (~/.openclaw and USER.md) which is coherent with the task.

Persistence & Privilege

Skill is not 'always: true' and does not request elevated system privileges. However it recommends (and documents how) to modify the agent's heartbeat config; modifying agent configuration affects agent behavior system-wide and should be done only with explicit user consent and backups (the SKILL.md does show a backup command). Autonomous invocation is allowed (platform default) which means the skill could run reminders without further user prompts.

Scan Findings in Context

[unicode-control-chars] unexpected: The SKILL.md contained unicode control characters flagged by the pre-scan. Control characters are not needed for a reminder skill and can be used to hide or alter content in prompts or to influence parsers. This is suspicious and should be inspected and removed or explained before use.

What to consider before installing

This skill appears to do what it says (periodic reminders) and doesn't request external credentials, but take these precautions before installing: 1) Inspect the SKILL.md file for hidden characters (remove unicode control characters) and verify the reminder logic and message content. 2) Back up ~/.openclaw/openclaw.json and any other OpenClaw files before allowing changes; prefer manual confirmation before any automatic edits. 3) Confirm USER.md does not contain sensitive tokens or secrets — the skill reads it to find a session ID. 4) Be aware the skill will read/write ~/.openclaw/memory/heartbeat-state.json and will send messages into your session; ensure you trust the agent to do that. 5) Consider timezone mismatch (SKILL.md uses GMT+8); adjust configuration if that doesn't match your locale. If you are uncomfortable with hidden control characters or modifying agent config files, do not install until the author provides a cleaned SKILL.md and a clear explanation of why config edits are necessary.

Water Reminder Skill - 45-minute Hydration and Movement Reminder

Function Description

Sends hydration and movement reminders every 45 minutes during working hours (8:00-23:00) to help maintain healthy work habits.

Configuration Requirements

1. Heartbeat Interval Configuration

• Requirement: OpenClaw heartbeat interval ≤ 45 minutes
• Current Status: High-frequency tasks execute every 15 minutes (meets requirement)
• Config File: ~/.openclaw/openclaw.json
• If modification needed, inform user of the method:

  # Backup original config
  cp ~/.openclaw/openclaw.json ~/.openclaw/openclaw.json.backup.$(date +%Y%m%d_%H%M%S)
  
  # Modify heartbeat config (add to agents.defaults or specific agent)
  # "heartbeat": {
  #   "every": "45m"
  # }
  

2. State Tracking File

• File Location: /home/${user}/.openclaw/workspace/memory/heartbeat-state.json
• Required Fields:

  {
    "lastWaterReminder": 1772681220,
    "chatId": "SESSION_CHAT_ID"
  }
  

3. User Information File

• File Location: USER.md
• Required Info: Contains user's channel session ID

Execution Logic

Time Check

1. Get current time (Example: GMT+8 timezone) converted to 24-hour format
2. Check if within 8:00-23:00 range
3. If outside working hours, skip reminder

Interval Check

1. Read lastWaterReminder timestamp from memory/heartbeat-state.json
2. Calculate time difference between current time and last reminder
3. If difference ≥ 45 minutes (2700 seconds), execute reminder

Reminder Execution

1. Update lastWaterReminder with current timestamp
2. Save back to memory/heartbeat-state.json
3. Send reminder message via the agent's configured channel to user's session

Reminder Message Content

💧 Time to hydrate!

Remember to:
- Drink a glass of water 🚰
- Get up and move around 🚶‍♂️
- Rest your eyes 👀

Stay healthy for better productivity! 💪

Error Handling

• File not found: Automatically create default state file
• Time format error: Use current time as baseline
• Network issues: Log error but don't interrupt other tasks
• User ID missing: Re-read from USER.md

Use Cases

• Health reminders during extended work sessions
• Preventing prolonged sitting
• Maintaining proper hydration
• Work rhythm regulation

Important Notes

• Reminders only sent during working hours (8:00-23:00 GMT+8)
• Respects user rest time, no notifications at night
• Updates state after each reminder for accurate timing
• Supports manual reset of reminder timer

Maintenance Recommendations

• Regularly check state file integrity
• Adjust reminder frequency based on user feedback
• Monitor reminder effectiveness and optimize user experience