Calendar Reminder 日历提醒

每晚22:00自动扫描明天的Outlook日历，上午日程提前2小时提醒，下午日程12:00统一提醒，通过飞书发送通知。依赖 owa-outlook skill。

Security Scan

The skill's stated purpose (nightly Outlook scan + Feishu reminders) is plausible, but there are multiple inconsistencies and a serious privacy risk: the script has a hard-coded Feishu recipient so calendar data would be sent to that ID unless you edit the code, and the SKILL.md and script expect different installation paths for files.

Purpose & Capability

The skill claims to scan Outlook (depends on owa-outlook) and use openclaw to schedule/send Feishu reminders; required binaries (python3, openclaw) and dependency on owa-outlook are coherent with that purpose.

Instruction Scope

SKILL.md instructs registering a cron that runs the script from ~/.openclaw/workspace/skills/calendar-reminder/calendar_reminder.py, but the script loads owa-outlook from ~/.agents/skills/owa-outlook and calls owa_calendar.py there — mismatch in expected paths. SKILL.md asks you to edit calendar_reminder.py to change the Feishu open_id, but the distributed script contains a hard-coded target (user:ou_159cbb6a...) which would cause calendar details to be sent to that ID if not changed.

Install Mechanism

Instruction-only installation (no download/install spec) — the code runs locally and uses existing openclaw and python binaries. This minimizes supply-chain install risk, but relies on existing openclaw/owa-outlook installation locations which are inconsistently referenced.

Credentials

No environment variables are requested, but the script will read calendar events (via owa_calendar.py) and transmit them via openclaw's Feishu messaging. The hard-coded recipient is disproportionate: the skill does not require nor ask for the target ID but contains someone else's ID, which can exfiltrate personal calendar contents unless you modify it. The script also accesses another skill's filesystem path (.agents/skills/owa-outlook), which may be unexpected depending on your agent layout.

Persistence & Privilege

always is false, but the agent is allowed to invoke skills autonomously (default). Combined with the hard-coded recipient and the cron registration instructions, the skill can be scheduled to run nightly and automatically send calendar contents to the embedded Feishu ID — increasing the blast radius if you don't edit the script and verify targets.

What to consider before installing

Before installing or enabling this skill: (1) Do NOT rely on the packaged code as-is — open calendar_reminder.py and change the Feishu target to your own ID (or modify send_feishu to use your configured channel) before running. Leaving the hard-coded user:ou_159c... will send your calendar details to that external ID. (2) Confirm where owa-outlook/owa_calendar.py is installed on your system and update SKILL_DIR or the cron command so the script can actually find it (SKILL.md and the script reference different paths). (3) Test the script manually (python3 calendar_reminder.py) and inspect its output to verify which fields of calendar events are transmitted. (4) If you cannot or do not want to edit the script, do not register the automatic cron; instead run manually after review. (5) Consider reviewing the owa_calendar.py implementation to ensure it only returns the expected fields and doesn't leak extra data. These inconsistencies could be benign developer oversights, but they create a real privacy/exfiltration risk if left unchanged.

功能

每晚 22:00 自动扫描明天的 Outlook 日历，按时间段设置提醒：

• 上午日程（< 12:00）→ 提前 2 小时飞书提醒
• 下午日程（>= 12:00）→ 当天 12:00 统一飞书提醒
• 扫描完成后立即发送汇报消息

依赖

• owa-outlook skill（提供 owa_calendar.py）
• openclaw CLI
• Python 3.9+（需要 zoneinfo 模块）

安装后配置

1. 注册每晚扫描 cron

openclaw cron add \
  --name "calendar-daily-scan" \
  --cron "0 22 * * *" \
  --tz "Asia/Shanghai" \
  --session main \
  --system-event "CALENDAR_SCAN: 请立即运行 python3 ~/.openclaw/workspace/skills/calendar-reminder/calendar_reminder.py 并等待完成" \
  --description "每晚22:00扫描明天日历并设置提醒"

2. 修改脚本中的飞书 open_id

编辑 calendar_reminder.py，将 send_feishu 函数中的 target 改为你自己的飞书 open_id：

"--target", "user:ou_xxxxxxxxxxxxxxxx",

手动运行

python3 ~/.openclaw/workspace/skills/calendar-reminder/calendar_reminder.py