Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Zhongshu Reminder System

Reminder and scheduling system for OpenClaw with support for one-time and recurring tasks, automatic delivery assurance, and integration with notification ch...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 30 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md describes a reminder/scheduling system with multi-channel delivery and integrations with other OpenClaw skills; this purpose is coherent with the skill name and description. However, the manifest declares no required environment variables or credentials even though Feishu, email, SMS and push integrations normally require API keys/credentials. Also package.json references a main index.js but no runtime code file is included in the package manifest, which is inconsistent with providing a CLI or service.
Instruction Scope
The instructions are high-level usage examples and configuration templates; they do not instruct the agent to read unrelated system files or exfiltrate data. The SKILL.md relies on other OpenClaw skills (feishu-messaging, task-tracker, monitoring) for integration rather than embedding explicit network endpoints.
Install Mechanism
No install spec is provided (instruction-only), which is low risk. However, presence of a package.json claiming a main module (index.js) while no code files are packaged is inconsistent and suggests the skill package is incomplete or improperly published.
!
Credentials
The skill requests no environment variables or primary credential despite describing features that normally require credentials (Feishu API, SMTP/API for email, SMS gateway credentials, push service credentials). It is unclear how those credentials are expected to be supplied (via other skills, global agent config, or omitted), which is disproportionate and a potential operational/authorization gap.
Persistence & Privilege
The skill does not request always:true, has no special config paths, and does not require elevated persistence or system-wide changes. Autonomous invocation is enabled (default) but that is normal for skills and not by itself a red flag.
What to consider before installing
This package claims to be a multi-channel reminder system but the package is incomplete and does not declare how external credentials are provided. Before installing or enabling it: (1) ask the publisher for the missing implementation (index.js or runtime code) and a source URL or homepage; (2) confirm how Feishu, email, SMS, and push credentials are supplied and stored (do not hand over global secrets implicitly); (3) verify whether the OpenClaw 'openclaw' CLI referenced in examples is actually available in your environment; (4) request documentation on how delivery confirmations and fallback escalation are implemented and whether any personal data (contact numbers, emails, message contents) are sent to third-party services; and (5) prefer installing only from a known source or repository and review the runtime code for any network calls or credential usage. If you cannot get these answers or code, treat the skill as untrusted.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9739nzxckbnskybv4t7a0a0ms8302nz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Reminder System

Overview

Intelligent reminder system that supports both one-time and recurring tasks with automatic delivery assurance. Integrates with multiple notification channels to ensure reminders are received.

Features

  • One-time reminders: Set reminders for specific dates and times
  • Recurring reminders: Support for daily, weekly, monthly, and custom recurrence patterns
  • Multiple notification channels: Feishu, email, SMS, and in-app notifications
  • Delivery assurance: Automatic fallback to alternative channels if primary fails
  • Natural language parsing: Understand human-readable time expressions like "tomorrow at 3pm" or "every Monday"
  • Task management integration: Links with task tracking systems

Usage Examples

Setting Reminders

One-time reminder:

openclaw reminder set "Call client about project" --time "2026-03-17 14:00"

Recurring reminder:

openclaw reminder set "Weekly team sync" --recur "weekly" --day "Monday" --time "10:00"

Natural language:

openclaw reminder set "Pay electricity bill" --when "next Friday at 5pm"

Managing Reminders

List active reminders:

openclaw reminder list

Cancel a reminder:

openclaw reminder cancel <reminder_id>

Snooze a reminder:

openclaw reminder snooze <reminder_id> --duration "1h"

Notification Channels

Primary Channels

  • Feishu: Direct messages or group chat notifications
  • Email: Standard email delivery with rich formatting
  • In-app: Notifications within the OpenClaw interface

Fallback Channels

  • SMS: Text message delivery (requires configuration)
  • Push notifications: Mobile app notifications (when available)

Delivery Assurance

The system ensures reminders are delivered through:

  1. Primary channel attempt: Send via preferred channel
  2. Confirmation check: Verify delivery receipt
  3. Fallback escalation: If no confirmation, try alternative channels
  4. Retry logic: Multiple attempts with increasing intervals
  5. Final escalation: Critical reminders get maximum priority

Integration

Integrates with other OpenClaw skills:

  • feishu-messaging: Primary notification delivery
  • task-tracker: Links reminders to task management
  • kanban: Updates task boards when reminders trigger
  • monitoring: Tracks reminder delivery success rates

Configuration

Reminders can be configured globally or per-user:

reminder:
  default_channel: feishu
  fallback_channels: [email, sms]
  retry_intervals: [5m, 15m, 30m, 1h]
  max_retries: 4
  timezone: Asia/Shanghai

Advanced Features

  • Context-aware reminders: Include relevant context from current tasks
  • Smart rescheduling: Automatically adjust based on user availability
  • Priority levels: Critical vs. normal reminders with different delivery rules
  • Group reminders: Notify multiple recipients for team tasks

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…