Daily Idiom

每日成语/俗语学习 — 每天一个中文成语或俗语，含故事典故、用法、例句，中英双语，测验打卡，学中文必备。Daily Chinese idiom — story usage examples quiz bilingual EN/CN, perfect for Chinese learners. Trigger on...

Security Scan

The skill's code and instructions are consistent with its stated purpose (daily idiom pushes); it stores lightweight local per-user settings and emits scheduler markers but requests no credentials or external network access.

Purpose & Capability

Name/description (daily idioms + scheduled pushes) align with the included scripts and SKILL.md. The provided push-toggle, morning-push, and evening-push scripts implement scheduling and content generation; nothing requested is out of scope for a push/learning skill.

Instruction Scope

SKILL.md instructs using node scripts to enable/disable pushes. The scripts print special __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ markers (used to register/unregister scheduled jobs) and write per-user JSON under data/users. They do not read other system files, environment variables, or call external network endpoints. Note: enabling pushes results in autonomous scheduled runs of the included scripts.

Install Mechanism

Instruction-only with included JS files; no install spec, no package downloads, and no third-party dependencies in package.json. No risky installers or remote fetches present.

Credentials

Skill declares no required environment variables or external credentials. The code does not request secrets; it only reads/writes local per-user JSON files and validates userId inputs. UserId sanitization prevents path traversal and enforces a tight character set.

Persistence & Privilege

always:false (normal). When enabled, the skill writes per-user config to data/users and emits scheduler registration markers so the platform will run the scripts on a schedule. This gives the skill recurring autonomous execution (as expected for push notifications) — the user must opt-in to enable it.

Assessment

This skill appears to do what it says: generate and schedule short Chinese idiom content. If you enable pushes (node push-toggle.js on <userId>), the skill will create a JSON file under data/users/<userId>.json and emit scheduler markers so the platform will run the morning/evening scripts automatically; it does not request API keys or make outbound network calls itself. Before enabling: (1) confirm you trust the host/agent that will execute scheduled jobs (these will run autonomously once scheduled), (2) review the data/users directory on your system if you have privacy concerns (it will store scheduling/channel preferences and pushEnabled), and (3) choose the correct delivery channel (telegram/feishu/slack/discord). If you do not want recurring autonomous runs, do not run the 'on' command.

每日成语

每日成语 — 典故故事 · 用法例句 · 测验打卡 · 中文文化输出

何时使用

• 用户说"成语""今日成语""成语故事"
• 用户学习中文或想了解中国文化
• 用户说"idiom""chengyu""learn Chinese"
• 用户说"成语接龙""猜成语""成语测验"

---

推送管理

node scripts/push-toggle.js on <userId>
node scripts/push-toggle.js on <userId> --morning 08:00 --evening 21:00 --channel feishu
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>

支持渠道：telegram / feishu / slack / discord