Reminder

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

A reminder may cause the agent to act on the scheduled text later, not just display a passive notification.

Why it was flagged

The reminder content supplied by the user is scheduled as a system event in the main session, which is expected for this skill but gives that text influence over the later agent action.

Skill content
`--system-event` - System event payload for main session ... User-specified task content must be sanitized before passing to cron
Recommendation

Use this only for clear, intended reminders and avoid scheduling sensitive, destructive, or ambiguous tasks.

What this means

The skill can create a delayed task that runs later and posts a result to the current Discord destination.

Why it was flagged

The skill uses the OpenClaw cron command to create scheduled agent actions and send results back to Discord. This is purpose-aligned, disclosed, and bounded to one-time jobs.

Skill content
openclaw cron add ... --system-event "Check Beijing weather" ... --announce ... --delete-after-run
Recommendation

Confirm the parsed time and reminder content before relying on it, and keep the one-time delete-after-run behavior.

What this means

Reminders are tied to the current Discord/account context and will be sent back to that destination.

Why it was flagged

The skill uses the current session's account and Discord routing context to deliver reminders. This is expected for Discord reminders and does not show credential exposure.

Skill content
Use `session_status` tool to get current session's deliveryContext ... `--agent` - Get from `deliveryContext.accountId` ... `--to` - Get from `deliveryContext.to`
Recommendation

Install only if you are comfortable with reminders being delivered through the active Discord session context.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A reminder task remains scheduled until its trigger time, then should remove itself after completion.

Why it was flagged

The skill creates a persistent scheduled job, but the artifact states it is one-time and deleted after it runs.

Skill content
`--delete-after-run` - Delete task after execution
Recommendation

Use reasonable reminder times and verify scheduled jobs if you need to cancel or audit them.