Daily Report

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill bundle defines reporting templates, memory management, and alert mechanisms. It instructs the agent to save operational logs to local files (e.g., `memory/YYYY-MM-DD.md`) and send operational alerts via Telegram. These file write and network communication actions are explicitly stated in `SKILL.md` and are directly aligned with the stated purpose of 'Track progress, report metrics, manage memory'. There is no evidence of intent to exfiltrate sensitive data, execute malicious commands, establish persistence, or perform unauthorized actions beyond the skill's stated functionality.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Lead and outreach summaries, costs, blockers, and notes may persist across sessions and could be reused later or exposed if the memory folder is shared.

Why it was flagged

The skill explicitly stores daily metrics, issues, notes, and future-session context in a persistent memory file.

Skill content
Save to memory/YYYY-MM-DD.md ... ## Notes
[Context for future sessions]
Recommendation

Keep the memory location private, avoid storing secrets or sensitive personal details, and periodically review or delete old daily logs.

What this means

If connected to a Telegram tool or bot, business status information such as replies, budget status, and errors could be sent outside the local environment.

Why it was flagged

The skill describes sending operational alerts through Telegram, an external messaging provider, but does not define the recipient, channel, or exact alert contents.

Skill content
Trigger immediate Telegram alert for:
- Any reply detected
- Budget 75% depleted
- API error / rate limit
- Overnight run complete
- Task blocked / needs input
Recommendation

Configure the Telegram destination deliberately, limit alert contents to necessary information, and confirm that recipients are authorized.