Daily Reflect

每日日记引导 — 每天提供一个深度日记主题，早间引导写作，晚间回顾反思，帮助用户建立写日记习惯、提升自我觉察。Daily journal prompts — morning writing guide and evening reflection to build a daily journaling habit...

Security Scan

The skill's code, instructions, and requirements are consistent with a journaling/push-scheduling skill — it reads/writes local per-user JSON, emits platform cron directives to schedule morning/evening prompts, and does not request extra credentials or perform network exfiltration.

Purpose & Capability

Name/description (daily journaling prompts and scheduled pushes) match the included scripts and SKILL.md: morning-push.js and evening-push.js generate prompts; push-toggle.js enables/disables scheduled pushes. The requested capabilities (scheduling pushes to messaging channels) align with the files and commands.

Instruction Scope

SKILL.md only documents trigger words and the node push-toggle usage. Runtime instructions and scripts operate on per-user JSON files under data/users and print platform cron directives; they do not attempt to read unrelated system files, environment variables, or contact external endpoints directly.

Install Mechanism

Instruction-only install (no install spec). The package is Node scripts intended to run in a node>=18 runtime; nothing is downloaded or written to unexpected system locations by an installer.

Credentials

The skill declares no required env vars, no credentials, and the code does not access environment variables beyond process.argv. It only writes local user JSON data and relies on platform-level routing (the printed __OPENCLAW_CRON_ADD__ messages) to deliver pushes.

Persistence & Privilege

The skill emits special __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ lines to request scheduling of recurring pushes; this is expected for a push/scheduling skill. always:false (not force-included). Because it schedules autonomous pushes, enabling it will cause periodic outbound messages via the chosen channel — this is intended behavior, not an unexplained privilege escalation.

Assessment

This skill appears coherent and limited to scheduled journaling prompts. Before enabling: (1) Verify you trust whoever will receive pushes for the supplied <userId> as the skill will write per-user JSON under data/users and schedule recurring pushes via the platform. (2) Confirm your OpenClaw/runtime will interpret the printed __OPENCLAW_CRON_ADD__ directives and that channel routing (telegram/feishu/slack/discord) is managed by the platform (the skill itself does not hold channel tokens). (3) Inspect the data/users files if you want to confirm what gets stored (timestamps, times, channel choice). (4) Ensure your runtime supports Node >=18. There are no signs of credential exfiltration or network calls in the skill code.

每日日记引导

每日日记引导 — 晨间写作 · 晚间反思 · 情绪觉察 · 习惯打卡

何时使用

• 用户说"写日记""今天写什么""日记打卡"
• 用户想做情绪记录、自我反思
• 用户说"journal""journaling""writing prompt"
• 用户说"帮我复盘今天""今天有什么值得记录的"

---

推送管理

node scripts/push-toggle.js on <userId>
node scripts/push-toggle.js on <userId> --morning 09:00 --evening 21:00 --channel feishu
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>

支持渠道：telegram / feishu / slack / discord