yoooclaw-work-report

ReviewAudited by ClawScan on May 15, 2026.

Overview

This skill does what it says—summarizes recent work notifications into a report—but users should know it reads local notification logs that may contain sensitive work or personal content.

This appears safe for its stated purpose, but it is privacy-sensitive. Before installing, consider whether you want an agent to read recent notification logs from work apps and possibly inspect broader daily or weekly notifications to identify work content. Set specific apps, groups, and date ranges when possible, and review the final report before sending it to a manager or workspace.

Publisher note

Auto-generate a daily or weekly work report from your work app notifications — progress, meetings, approvals, and follow-ups in one place.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run a local OpenClaw command to find where notification logs are stored before reading the relevant notification files.

Why it was flagged

The skill instructs the agent to use a local command through Bash to locate notification storage. This is purpose-aligned and limited, but users should notice that the skill relies on runtime local tool access.

Skill content
先通过 `openclaw ntf storage-path` 获取通知存储目录(用 Bash 工具运行该命令,stdout 即是目录的绝对路径)。
Recommendation

Install only if you are comfortable with this local notification-log lookup, and specify the apps, groups, or date range you want summarized when possible.

What this means

Your work messages, meeting names, project names, people's names, approvals, and other notification content for the chosen period may be read and summarized into the chat output.

Why it was flagged

The skill processes local notification history, which can include sensitive work and personal data, and retains key entities in the generated report. The behavior is disclosed and time-bounded, but it is still privacy-sensitive.

Skill content
一天一文件,包含当日全部 App 通知 ... 未设置时自动从通知中识别工作类应用 ... 保留关键实体:项目名、文档名、会议名、人名、截止时间
Recommendation

Review the generated report before sharing it, and provide a narrow app/group/date scope if you want to avoid unrelated or personal notifications being processed.