Daily Review Ritual
v1.0.0End-of-day review to capture progress, insights, and plan tomorrow
⭐ 7· 3.8k·22 current·25 all-time
by@itsflow
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the content of SKILL.md. The actions described (find today's notes, create/update a daily note, archive completed tasks) are consistent with a daily-review helper and no unrelated resources, binaries, or credentials are requested.
Instruction Scope
The instructions ask the agent to 'find all notes modified today', 'identify new notes', 'move completed project tasks to archive', and to create/update a daily note. These are reasonable for a review skill but are vague about where notes/projects live (local files, Obsidian/Notion/other). That vagueness gives the agent broad discretion to access whatever storage it can reach; the skill does not declare or limit which paths/services should be used.
Install Mechanism
No install spec and no code files (instruction-only). This is low-risk for installation because nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requests no environment variables, credentials, or config paths. Its declared requirements are proportionate to its stated purpose.
Persistence & Privilege
The skill is not always-included and does not request elevated or persistent platform privileges. It is user-invocable and can be invoked autonomously (platform default), which is expected for such a helper.
Assessment
This is an instruction-only, low-install-risk skill whose behavior matches its description. However, the SKILL.md assumes access to your notes and project data but doesn't specify where they live. Before enabling or using it, check what data the agent can access: if your agent has filesystem or third-party app access, confirm which vault/Notion workspace/notes folder will be read/modified. Back up important notes or test the skill in a restricted sandbox or sample vault first to ensure it only updates the locations you expect. If you need tighter guarantees, request a version of the skill that explicitly names the storage target or requires a connection token for a specific service.Like a lobster shell, security has layers — review code before you run it.
latestvk97d371ghw87fevkmznfj5xjz17ztr41
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
