Daily Report

PassAudited by ClawScan on May 10, 2026.

Overview

This is a benign instruction-only reporting template, but it can store daily business metrics in memory and send Telegram alerts if connected to those tools.

Before installing, decide what data is allowed in daily memory logs and who should receive Telegram alerts. The provided artifact is instruction-only and does not include executable code or credential collection.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Lead and outreach summaries, costs, blockers, and notes may persist across sessions and could be reused later or exposed if the memory folder is shared.

Why it was flagged

The skill explicitly stores daily metrics, issues, notes, and future-session context in a persistent memory file.

Skill content
Save to memory/YYYY-MM-DD.md ... ## Notes
[Context for future sessions]
Recommendation

Keep the memory location private, avoid storing secrets or sensitive personal details, and periodically review or delete old daily logs.

What this means

If connected to a Telegram tool or bot, business status information such as replies, budget status, and errors could be sent outside the local environment.

Why it was flagged

The skill describes sending operational alerts through Telegram, an external messaging provider, but does not define the recipient, channel, or exact alert contents.

Skill content
Trigger immediate Telegram alert for:
- Any reply detected
- Budget 75% depleted
- API error / rate limit
- Overnight run complete
- Task blocked / needs input
Recommendation

Configure the Telegram destination deliberately, limit alert contents to necessary information, and confirm that recipients are authorized.