Activity Notifier
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a simple Discord activity notifier, but it may post task details to a fixed/default Discord channel unless the user explicitly controls the destination.
Before installing, verify that the Discord token and channel ID are yours, configure an explicit private channel if you use it, and tell the agent not to include sensitive project names, files, or task details in activity updates.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Agent activity and task context could be posted to an unintended Discord channel, potentially exposing what the user is doing.
The skill sends updates to Discord and appears to provide a fixed/default channel while making the user-controlled channel override optional and undeclared in registry env vars.
to: "channel:1477516155655688306" ... Optional: Set `ACTIVITY_CHANNEL_ID` in environment to override default channel.
Require an explicit user-configured channel ID before use, verify the channel owner/audience, and avoid including sensitive task details in notifications.
The skill can post messages using the configured Discord integration.
The skill requires a Discord token so it can send messages; this is expected for the stated Discord-notification purpose, but it grants delegated posting authority.
metadata: { "openclaw": { "requires": { "config": ["channels.discord.token"] } } }Use a least-privilege Discord bot/token limited to the intended server and channel.
The agent may send activity notifications during longer tasks, which could be visible to everyone in the configured Discord channel.
The skill authorizes the agent to send messages and encourages completion updates; this is aligned with the notifier purpose, but it can create external posts without a per-message user confirmation.
allowed-tools: ["message"] ... "Final summary — always send completion message"
Confirm the desired notification behavior and channel before enabling autonomous use.