Daily Sleep

Sleep better tonight — personalized wind-down routine, breathing exercises, bedtime stories, and sleep hygiene tips. Daily evening push for better rest.

Security Scan

The skill's files, runtime instructions, and required inputs are consistent with a push-based sleep-coach skill; it doesn't request credentials or make external network calls and appears to only schedule local push jobs and store per-user JSON state.

Purpose & Capability

The name/description match the code and SKILL.md: scripts generate morning/evening prompts and manage scheduled pushes. Minor manifest mismatches exist (published version 1.0.3 vs package.json 1.0.2 and _meta.json 1.0.0) and source/homepage are absent — this is an integrity/metadata concern but not a functional or security mismatch.

Instruction Scope

SKILL.md instructs use of the provided push-toggle and push scripts. The scripts only read/write per-user JSON under ./data/users, sanitize inputs, print scheduling markers (__OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__), and output prompt text; they do not read arbitrary system files, access environment secrets, or call external endpoints.

Install Mechanism

No install spec; this is effectively instruction-plus-scripts only. There are no downloads, package installs, or extracted archives. The risk surface is limited to the included JS files.

Credentials

The skill declares no required env vars/credentials and the code does not reference process.env secrets. It only writes user preference files and uses a sanitized userId and explicit allowed channel list.

Persistence & Privilege

always is false; the skill writes its own data under ./data/users and emits scheduling markers for the platform to pick up. It does not modify other skills or global agent configuration.

Assessment

This skill appears to do what it claims: schedule and print morning/evening sleep-coaching messages and store simple per-user JSON preferences. Before installing, consider: (1) the source/homepage are missing and package/_meta versions mismatch — if provenance matters, ask the publisher for a trusted source or updated metadata; (2) per-user data is stored unencrypted under the skill's data/users directory — don't put sensitive info in userId or those files; (3) scheduling relies on the platform recognizing the __OPENCLAW_CRON_ADD__/RM__ markers and on the platform sending messages to the configured channels (telegram/feishu/slack/discord) — confirm you trust your OpenClaw runtime to handle those markers and deliver messages; and (4) if you want extra assurance, review the three script files yourself (they are short and local) or run them in a sandboxed environment before enabling pushes.

睡眠助手

睡眠助手 — 晨间唤醒 · 睡前放松 · 助眠引导 · 失眠改善

何时使用

• 用户说"失眠""睡不好""帮我睡觉"
• 用户说"睡前放松""助眠""入睡困难"
• 用户说"sleep""insomnia""can't sleep"
• 用户说"睡眠质量差""怎么改善睡眠"

---

推送管理

node scripts/push-toggle.js on <userId>
node scripts/push-toggle.js on <userId> --morning 07:00 --evening 22:00 --channel feishu
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>

支持渠道：telegram / feishu / slack / discord