water-reminder
ReviewAudited by ClawScan on May 10, 2026.
Overview
Prompt-injection indicators were detected in the submitted artifacts (unicode-control-chars); human review is required before treating this skill as clean.
This looks reasonable for a reminder skill. Before installing, confirm you want recurring notifications from 8:00 to 23:00, review any heartbeat configuration change before applying it, and keep USER.md and the heartbeat state file private or remove them when disabling the skill. ClawScan detected prompt-injection indicators (unicode-control-chars), so this skill requires review even though the model response was benign.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If followed, the agent heartbeat frequency may be changed, which could affect how often recurring tasks run.
The skill documents changing OpenClaw heartbeat configuration, which can affect recurring agent execution. The instructions frame this as user-informed setup and include a backup step.
Config File: `~/.openclaw/openclaw.json` ... If modification needed, inform user of the method ... `heartbeat`: `{ "every": "45m" }`Only apply the heartbeat change intentionally, prefer the narrowest per-agent configuration if available, and keep the backup so it can be reverted.
Your local session/channel ID may be used by the agent to address reminder messages to you.
The skill needs a user channel/session identifier so it can send reminder messages. This is expected for the stated purpose, but it is still account/session-related data.
User Information File ... File Location: USER.md ... Required Info: Contains user's channel session ID
Keep USER.md local and private, and remove or update the session ID if you disable or uninstall the reminder.
A local state file may persist after use and may contain your last reminder timestamp plus the chat/session ID used for notifications.
The skill stores persistent reminder state and a chat/session identifier in OpenClaw memory. This is scoped to reminder timing, but it is persistent local context.
State Tracking File ... `/home/${user}/.openclaw/workspace/memory/heartbeat-state.json` ... `lastWaterReminder` ... `chatId`Review or delete the state file when disabling the skill, and ensure local file permissions protect the OpenClaw memory directory.
The agent may continue sending reminders during the configured daily window until the skill or schedule is disabled.
The skill is designed for recurring autonomous reminders. This persistence is disclosed and central to the purpose rather than hidden or self-propagating.
Sends hydration and movement reminders every 45 minutes during working hours (8:00-23:00)
Install only if you want recurring notifications, and make sure you know how to disable the skill or revert the heartbeat/state configuration.