stealth-break

健康摸鱼技能，提供隐蔽的休息策略和定时提醒，使用 macOS 系统通知推送，帮助缓解工作压力、眼睛疲劳、腰椎问题，预防猝死。

Security Scan

The skill genuinely implements macOS notification-based break reminders and is mostly aligned with its stated purpose, but there are coherence issues (macOS-only runtime instructions without OS restriction, package/metadata inconsistencies) and it instructs persistent crontab changes — review before installing.

Purpose & Capability

The skill claims macOS system notifications as its delivery mechanism and all runtime instructions target macOS (osascript). However the skill metadata lists no OS restriction. Additionally a package.json and README mention an install flow (npx clawhub install) and a repository URL while the registry entry and install spec are absent — presence of package.json but no install spec is an inconsistency. These mismatches mean the declared metadata does not fully match what the skill actually requires/expects.

Instruction Scope

SKILL.md restricts actions to giving break recommendations and setting reminders via cron + osascript. It does not instruct reading user files or accessing credentials. However it explicitly instructs creating cron jobs and using exec to run osascript (i.e., running shell commands on the user's machine), which is within the stated purpose but has side effects (modifies crontab, spawns OS-level commands).

Install Mechanism

No install spec is present and there are no code files to execute; the skill is instruction-only. This is low-risk from an install mechanism perspective. Note: package.json and README mention an install command (npx clawhub install) despite no install spec — an inconsistency but not an active installer in the bundle.

Credentials

The skill requests no environment variables, no credentials, and references no config paths. Runtime behavior (osascript + cron) does not require extra secrets, so requested privileges are proportionate to purpose.

Persistence & Privilege

The instructions ask the agent to create cron tasks to schedule notifications. That modifies the user's crontab and is persistent across reboots. While 'always' is false and the skill does not claim elevated privileges, the persistence and modification of user cron deserve explicit user consent and inspection before being applied.

What to consider before installing

This skill appears to do what it says (provide break suggestions and schedule macOS notifications), but take these precautions before installing or allowing it to run commands: - Confirm you are on macOS. The skill's notifications use osascript; it will fail or do nothing on other OSes. The skill metadata does not restrict OS, so verify platform compatibility. - Review and approve any cron entries before they are written. Creating cron jobs is persistent and edits your crontab; back up your crontab (crontab -l > backup.txt) and inspect new lines. - When the agent proposes shell commands (cron or osascript), don't let it run them blindly — copy them and run them manually if you prefer. - The package.json/README mention an npx install and a repository URL but no install spec is present in the bundle. Verify the skill's source and distribution channel (who published it, and whether the repository is trustworthy) before using automated installers. - If you want automatic scheduling, prefer explicit, minimal cron entries that only call osascript with static, reviewed strings. Avoid giving the skill blanket permission to execute arbitrary shell commands. If you want, I can (a) extract the exact cron lines and osascript commands the skill would create so you can inspect them, or (b) produce step-by-step manual instructions to set up the reminders yourself without granting the agent permission to edit your crontab.

stealth-break - 健康摸鱼技能

健康第一，适度休息，隐蔽放松，长久工作

触发条件

用户表达以下意图时激活：

• 工作太累需要休息
• 想摸鱼但怕被发现
• 需要缓解工作压力
• 长时间工作后需要放松
• 请求设置健康提醒

核心原则

健康第一: 摸鱼的目的是恢复精力，不是逃避工作。

适度原则: 每次 5-15 分钟，每天 2-3 次，不影响工作交付。

隐蔽自然: 看起来像在工作，实际在放松。

摸鱼策略

1. 屏幕保护型

• 假装查文档: 打开技术文档/StackOverflow，实际浏览放松内容
• 终端挂机: 保持终端运行 long-running 命令（tail -f, watch），看起来在工作
• 代码审查模式: 打开 GitHub PR，慢慢看，实际在休息眼睛

2. 身体活动型

• 接水战术: 去茶水间接水，顺便走动 5 分钟
• 卫生间休息: 每次 5-7 分钟，做深呼吸/伸展
• 楼梯运动: 爬 2-3 层楼梯，活动身体

3. 社交掩护型

• 工作讨论: 找同事"讨论技术问题"，实际聊天放松
• 站会延长: 1 对 1 沟通时适度延长，放松大脑
• 帮助他人: 帮同事解决问题，换脑子

4. 学习伪装型

• 技术调研: 看新技术文章，既学习又放松
• 文档整理: 整理个人笔记，节奏自己控制
• 代码重构: 优化小段代码，低压力工作

时间建议

上午: 10:30-10:45 (工作 1.5 小时后)
下午: 15:00-15:15 (午后疲劳期)
傍晚: 17:30-17:45 (下班前放松)

注意事项

⚠️ 不要过度: 每天摸鱼时间不超过 1 小时 ⚠️ 保证交付: 工作任务必须按时完成 ⚠️ 观察环境: 团队紧张时减少摸鱼 ⚠️ 保持状态: 摸鱼后快速进入工作状态

健康提醒

摸鱼是为了：

• ✅ 缓解眼疲劳
• ✅ 活动身体
• ✅ 恢复注意力
• ✅ 减少 burnout 风险

不是为了:

• ❌ 逃避责任
• ❌ 降低工作质量
• ❌ 影响团队协作

macOS 系统通知推送

提醒类型和文案

👁️ 眼睛休息提醒 (每 60 分钟)

标题：👁️ 眼睛休息提醒
内容：你已经连续工作 1 小时了，请：远眺 6 米外 20 秒，闭眼休息 1 分钟，眨眼 10 次。20-20-20 法则：每 20 分钟看 20 英尺外 20 秒。

🪑 腰椎保护提醒 (每 90 分钟)

标题：🪑 腰椎保护提醒
内容：久坐伤腰，请立刻起身：走动 2 分钟，腰部伸展（双手叉腰向后仰 5 次）。腰间盘突出不可逆，预防最重要！

🧘 深呼吸放松 (每 120 分钟)

标题：🧘 身心放松提醒
内容：工作 2 小时了，做 3 分钟深呼吸：吸气 4 秒→屏息 4 秒→呼气 6 秒，重复 5 次。缓解压力，预防猝死。

💪 提肛挑战 (每 120 分钟)

标题：💪 提肛挑战提醒
内容：久坐必备，隐蔽进行：收缩肛门 3 秒→放松 3 秒，重复 10-15 次。预防痔疮 + 改善前列腺健康，开会时都能做！

macOS 通知命令

使用 osascript 发送系统通知：

osascript -e 'display notification "提醒内容" with title "提醒标题"'

示例：

osascript -e 'display notification "你已经连续工作 1 小时了，请远眺 6 米外 20 秒" with title "👁️ 眼睛休息提醒"'

输出格式

当用户请求摸鱼建议时：

1. 先关心用户工作状态（是否过度劳累）
2. 根据当前时间推荐合适的摸鱼方式
3. 提醒适度原则和健康第一
4. 提供 2-3 个具体可执行的建议

当用户请求设置提醒时：

1. 确认提醒类型和频率
2. 使用 cron 工具创建定时任务
3. 使用 exec 调用 osascript 发送 macOS 通知
4. 告知用户下次提醒时间

---

记住: 健康工作才能长久，适度休息是为了更好地工作。

技能维护: 如需调整提醒频率或内容，修改本 SKILL.md 并重启 Gateway。