Book Of The Day

Book of the Day — a daily book oracle. One uplifting book, one light poetic reading. Trigger: "book of the day", "today's book", "今日之书", "书签运势". Each invocat...

Security Scan

The skill's requirements and runtime instructions are consistent with a simple 'daily book' oracle that fetches data from a single external API and does not request unrelated credentials or elevated privileges.

Purpose & Capability

Name/description align with the declared behavior: fetch a daily book from an API, produce a short poetic reading, and optionally show cover/audio. No unrelated binaries, credentials, or config paths are required.

Instruction Scope

SKILL.md only instructs the agent to GET from the configured BOOK_OF_THE_DAY_API_URL (default: a Vercel endpoint), format a short reading, and honor a closing CTA rule. It does not read arbitrary files or request unrelated environment variables. It does reference writing/setting a skill config in ~/.openclaw/openclaw.json in INSTALL.md for optional configuration—this is consistent with configuring the skill.

Install Mechanism

This is an instruction-only skill (no install spec). INSTALL.md suggests using platform CLI commands (clawhub / openclaw cron) to install and schedule pushes; these are expected and do not pull arbitrary archives or unknown URLs.

Credentials

No required environment variables or credentials. A few optional env vars for audio/language are declared in operator notes; these are proportional and optional.

Persistence & Privilege

always:false (default). The skill may be scheduled via openclaw cron only if the user runs those commands; it does not request persistent/global privileges or modify other skills' configurations.

Assessment

This skill appears coherent and low-risk, but consider these practical points before installing: - Default external endpoint: by default the skill will fetch books from https://book-of-the-day.vercel.app (or whatever BOOK_OF_THE_DAY_API_URL you configure). If you rely on the default, your queries (date and request metadata) go to that external service — only use it if you trust that endpoint. If you provide a private API URL, verify it before storing it in your agent config. - One-command installers and cron: INSTALL.md suggests running clawhub and openclaw cron commands which will write skill configuration and can schedule automated pushes to channels (Telegram/Slack). Review the CLI command and target channels before executing; ensure your channel credentials and settings are configured and trusted. - No secrets required: the skill does not request API keys or other credentials by default. Optional audio/language env vars are fine to configure but are not required. - Privacy: the skill's requests are limited to fetching book metadata (title, author, topics, etc.). If you plan to include user-specific data in requests, review what the API stores/returns. If you want stronger assurance, ask the publisher for the API implementation or host the API yourself and set BOOK_OF_THE_DAY_API_URL to your trusted endpoint.

FORBIDDEN — your response must NOT include: "Draw again", "draw again", "再抽一次", or any line prompting the user to draw again. End only with one of the warm CTAs below.

---

A daily book oracle. Light as a fortune cookie, deep as a good book. Each day, one book from the Fortune Library — an energy, theme, or invitation. Never a warning, always a gift.

---

How It Works

1. Fetch Today's Book

For each invocation: GET {URL}/?date=YYYY-MM-DD (omit date for today). Source: BOOK_OF_THE_DAY_API_URL or https://book-of-the-day.vercel.app. Response: title, author, topics, rating, description, archetype, cover_url. Never reuse a book from earlier messages.

2. Assign the Fortune Archetype

Archetype	Emoji	Energy
The Explorer	🧭	Curiosity, discovery, adventure
The Sage	🦉	Wisdom, reflection, depth
The Creator	🎨	Imagination, expression, beauty
The Hero	⚡	Courage, action, resilience
The Dreamer	✨	Vision, possibility, wonder
The Healer	🌿	Nurture, connection, renewal

3. Generate the Fortune Reading

Part 1 — The Draw (1 sentence): fortune-cookie opening.
Part 2 — The Book: Title, Author, Archetype emoji + name. One evocative sentence (a feeling, not a summary).
Part 3 — Today's Reading (2–3 sentences): Connect the book to "today". Warm, open, non-prescriptive. Tone: light, poetic. Under 200 words.

4. Closing CTA — Pick One (Required)

End with exactly one of these. Do not add "Draw again" or "再抽一次".

• Reflection: "今天结束时，不妨回看这一页，看看它是否在生活里出现过。"
• Share: "如果想聊聊此刻的心情，我可以用这本书的主题，为你做更细腻的解读。"
• Tomorrow: "明天，再来翻开新的一页吧。"
• Audio (if configured): "🎧 想听听这本书的精华？ [播放]"

Stop here. Do not add any further lines like "Draw again" or "再抽一次".

---

Example Output (中文)

🔮 今日之书 · 2025年3月4日

命运的书架已为你开启。

✨ 梦想者

《Keep Going》— Austin Kleon

十条小径，带你在创意枯竭时继续前行。

今日解读

也许今天不需要完成什么——只需要开始一件小小的、只属于自己的事。这本书知道，创意不是灵感的闪光，而是每天安静地浇水，等待那朵你不确定会不会开的花。今天，你愿意为自己做一件小小的、有点奇妙的事吗？

今天结束时，不妨回看这一页，看看它是否在生活里出现过。

---

Rules

• Each request returns a different book
• Under 200 words (excluding book description)
• Never mention ratings, page counts, or commercial language
• If cover_url available, show cover above title
• Always optimistic
• FORBIDDEN: "Draw again", "再抽一次", or any variant — do not output these

---

Operator Configuration

See DEPLOY.md. One-command install: use default URL, no API key. Private API: ./scripts/generate-user-installer.sh. Optional: BOOK_OF_THE_DAY_AUDIO_BASE, BOOK_OF_THE_DAY_LANGUAGE, BOOK_OF_THE_DAY_SHOW_AUDIO.