Smart Reminder

ReviewAudited by ClawScan on May 13, 2026.

Overview

The skill is a coherent reminder assistant, but it creates persistent scheduled agent jobs and cross-channel messages without clearly showing how those jobs are removed when a reminder is canceled.

Use this skill only if you are comfortable with OpenClaw creating scheduled cron reminders and optionally sending them through a connected chat channel. Before relying on it, confirm that canceling or deleting a reminder also removes the underlying cron job, and avoid storing sensitive personal details in reminder titles.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A reminder could continue to trigger, or an agent could continue sending scheduled messages, after the user believes the reminder was canceled.

Why it was flagged

The skill creates scheduled background jobs, including direct delivered agent turns, but the visible cancel path only disables local state and does not clearly remove the scheduler job or ensure direct agentTurn deliveries check the disabled flag.

Skill content
“存储 task 配置后必须同时创建 cron 任务!” ... “直接创建 `agentTurn` 类型的 cron job,通过 delivery 投递到微信” ... “取消任务 → `enabled = false`”
Recommendation

Require cancellation and deletion flows to remove the matching cron job, and have every scheduled handler check the task's enabled status before sending any reminder.

What this means

Personal habits and progress history may remain stored locally for future reminder context.

Why it was flagged

The skill intentionally keeps persistent local memory about the user's nickname, routines, reminder history, and completion status.

Skill content
“将任务写入状态文件:`memory/smart-reminder-tasks.json`” with fields including `config.nickname`, `tracking.history`, and `tracking.sinceLastCompletion`
Recommendation

Avoid putting highly sensitive details in reminder names, and provide or use a clear way to view, edit, and delete the stored reminder state.

What this means

If the target or bot account is chosen incorrectly, reminders could be sent to the wrong chat or through the wrong connected account.

Why it was flagged

For cross-channel reminders, the skill uses connected channel/session identifiers and a bot account ID to deliver messages to WeChat.

Skill content
`delivery.to`: “用户@im.wechat”; `delivery.accountId`: “bot的AccountId”; `sessionKey` — “目标会话 key”
Recommendation

Verify the recipient, channel, and bot account before enabling cross-channel reminders, and avoid granting broader channel access than needed.