Reminder
v0.1.1Capture natural-language events, save to your workspace, and schedule Telegram reminders with automatic cron notifications and upcoming event queries.
⭐ 7· 8.2k·95 current·101 all-time
byReed@reed1898
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes a reminder secretary that parses natural-language events, stores them in a workspace file, and schedules Telegram reminders via the platform cron. Required actions (writing an events file and scheduling cron jobs) match that purpose. Minor inconsistency: the skill references delivery to "current Telegram" but does not document any Telegram credential or integration requirement.
Instruction Scope
Runtime instructions are limited to parsing events, writing/updating reminders/events.yml, creating cron jobs via OpenClaw cron, and reading that events.yml to answer queries. It does not instruct reading unrelated system files. Note: the SKILL.md references both an absolute path (~/.openclaw/workspace/reminders/events.yml) and a relative path (reminders/events.yml) — clarify which path the agent will use to avoid accidental writes in unexpected locations.
Install Mechanism
Instruction-only skill with no install spec and no code files included, so nothing is downloaded or written by an installer. Low installation risk.
Credentials
The skill does not request secrets or credentials. It documents optional env vars (REMINDER_TZ, REMINDER_OFFSETS_MINUTES) with sensible defaults, which is proportional. However, it implies sending messages to Telegram without documenting required Telegram credentials or auth — confirm whether the platform's Telegram integration will be used and whether any tokens/chat IDs are needed or stored elsewhere.
Persistence & Privilege
The skill writes event data into the user's workspace and creates OpenClaw cron jobs (its own scheduled tasks). It does not request always:true or modify other skills. Creating cron jobs is an expected capability for a scheduler, but you should confirm what those cron jobs execute and what permissions they run with.
Assessment
Before installing, confirm these points: (1) where exactly events are stored (absolute path vs relative) and that the directory is intended for personal data; (2) whether your Telegram integration or bot credentials are already configured in OpenClaw (the skill does not declare or request a Telegram token); (3) review your gitignore and repo rules so personal events aren't accidentally committed; and (4) inspect what the scheduled cron jobs will execute (commands/targets) so you understand what the scheduler can do and with what permissions.Like a lobster shell, security has layers — review code before you run it.
latestvk97apnp6f4q7kqh848kymaemdd80njp9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.