OpenClaw Diary Insights
PassAudited by ClawScan on May 1, 2026.
Overview
This diary-insights skill is coherent and purpose-aligned, but it reads private diary content, persists derived local files, and uses a remote CDN in the generated page.
This looks safe to use if you want local diary analysis. Before installing, be comfortable with it reading your diary folder and saving summarized personal insights locally; for maximum privacy, review the generated files and avoid the CDN-backed browser page or replace the CDN resources with local copies.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your diary entries, moods, people, topics, and personal insights may be summarized into files that remain on disk.
The skill reads private diary files and turns them into persistent structured summaries for a local visualization.
使用 Read 工具读取 `storage.path` 下的日记文件 ... 将 `data.js` 写入输出目录：`~/write_me/02notes/insights/data.js`
Use it only for diary folders you intend to analyze, review the generated output, and avoid placing the output directory in shared or synced locations unless you are comfortable exposing those summaries.
The skill will create or update local files in the insights output directory.
The skill uses shell/file operations to create an output folder and copy the visualization template.
mkdir -p ~/write_me/02notes/insights ... cp {skill目录}/demo/insights.html ~/write_me/02notes/insights/insights-{YYYY-MM}.htmlCheck the output path before use and keep backups if you manually edit generated files.
The generated local page executes generated JavaScript data when opened in a browser.
Diary-derived data is written into a JavaScript file that the local HTML page loads as a script; this is expected for the visualization but makes correct escaping important.
HTML 模板通过 `<script src="data.js">` 加载外部数据文件，Claude 只需要生成 `data.js`
Review generated data.js if your diary includes copied web content or unusual characters, and prefer JSON-safe escaping when generating the file.
Opening the generated page may contact third-party hosts, and remote scripts run in the same page that displays diary-derived data.
The local visualization depends on a remote Chart.js script, and the HTML also references Google-hosted fonts.
<script src="https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js"></script>
For highly private diaries, consider using a locally bundled Chart.js file and local fonts or opening the page with network access blocked.