Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Daily Inspiration

v1.0.0

每天定时推送倪海厦、南怀瑾等国学大师的相关内容,通过飞书发送给用户。内容包括佛学解脱、气功、周易、中医等主题。用于:用户请求每天获取精神修行相关资讯。

0· 103·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for gabriel-zz/daily-inspiration.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Daily Inspiration" (gabriel-zz/daily-inspiration) from ClawHub.
Skill page: https://clawhub.ai/gabriel-zz/daily-inspiration
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install daily-inspiration

ClawHub CLI

Package manager switcher

npx clawhub@latest install daily-inspiration
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (daily Feishu push of classical/health content) is reasonable. However, the skill declares no required credentials or config for Feishu nor any install steps. That could be fine if it relies on the agent's built-in 'message' tool, but the package itself does not implement Feishu integration, so it's unclear who/what will actually perform the sends.
!
Instruction Scope
SKILL.md instructs the agent to run scheduled tasks, perform 'batch_web_search' to gather content, extract useful fragments, and send via a 'message' tool to Feishu. The included Python script only selects a topic and formats a string; it does not perform web searches, scraping, or send messages. The runtime instructions therefore grant the agent broad authority (web search + message delivery) that is not reflected in the code, and the scheduling mechanism is unspecified.
Install Mechanism
No install spec (instruction-only plus a small helper script). This minimizes on-disk install risk—there is no external download or package installation declared.
!
Credentials
The skill requests no environment variables or credentials, yet SKILL.md expects sending messages to Feishu. Sending to Feishu typically requires tokens/keys; absence of declared credentials is disproportionate unless the agent's 'message' tool provides delivery without additional config. The skill also doesn’t declare or document where web-search results come from or whether API keys are needed for the search tool.
Persistence & Privilege
always is false and there's no evidence the skill requests elevated or permanent presence. The skill does state it runs on scheduled triggers, but the manifest doesn't force inclusion or ask to modify other skills/configs.
What to consider before installing
Before installing, verify these points with the skill author: (1) How are Feishu messages delivered? Ask for the exact mechanism and required credentials (e.g., FEISHU_TOKEN) and where those should be stored. (2) Confirm the scheduled trigger mechanism—who configures the cron/timer that runs this skill? (3) The included script only selects/formats a topic and prints it; ask for the code that performs web searches and sends messages, or clarify that the agent's built-in 'batch_web_search' and 'message' tools will be used. (4) If you will provide Feishu credentials, ensure they are scoped minimally and stored securely. (5) Consider testing in a safe environment/account first to confirm no unexpected messages or data exfiltration occur. The mismatches here look like an oversight or incomplete implementation rather than clearly malicious code, but you should get these clarifications before trusting it with credentials or enabling automated sends.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f0ke9z0kwcny2sr1cjyd10n83aad2
103downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

每日灵修推送

触发方式

此技能在定时任务触发时自动运行,无需用户主动请求。

内容优先级

  1. 倪海厦天纪 - 易经、风水、命理、阴阳五行(30%)
  2. 倪海厦人纪 - 中医经典、针灸、伤寒论(25%)
  3. 老庄哲学 - 道德经、庄子、逍遥自在(25%)
  4. 佛学/禅定 - 南怀瑾、禅定修行(20%)

执行流程

  1. 选择主题:随机从四个范畴中选择(天纪30%,人纪25%,老庄25%,佛学20%)
  2. 搜索内容:使用 batch_web_search 搜索相关主题的最新或经典内容
  3. 整理内容:提取有价值的信息片段
  4. 发送飞书:使用 message 工具发送到用户

内容来源

  • 倪海厦天纪:易经、阴阳五行、风水、命理、紫微斗数
  • 倪海厦人纪:针灸、黄帝内经、神农本草经、伤寒论、金匮要略
  • 老庄哲学:道德经、庄子、列子、杨朱
  • 佛学:南怀瑾著作、禅宗公案

输出格式

每日两条推送:

早间(6:00-8:00):偏重修行、心性类 晚间(18:00-20:00):偏重养生、实用类

消息格式:

📖 每日灵修

[标题]

[内容摘要/经典语录/实用知识]

来源:xxx

Comments

Loading comments...