Daily Hotspot Push

• Risk level: Low
• Analyzed: Apr 24, 2026, 1:07 PM
• Findings: 0
• Version: 1.0.3

Overview

The skill's code and instructions are consistent with its stated purpose (creating scheduled daily news subscriptions delivered via OpenClaw cron to QQ); it requests no unrelated credentials or downloads and its runtime behavior (creating cron jobs that fetch news and deliver to QQ) matches the description.

This skill appears coherent and implements what it claims: it will create persistent OpenClaw cron jobs that autonomously fetch news (via the agent/runtime) and send them to the specified QQ target. Before installing, confirm: 1) your OpenClaw runtime and QQ delivery channel are properly configured and trusted (cron jobs will run later with whatever runtime privileges the agent has); 2) you are comfortable with persistent scheduled messages being created on your behalf; 3) the local data folder (data/subscriptions.json and data/user_timezones.json) will be written under the skill directory — if you prefer different storage, plan accordingly; 4) the script appears focused and contains no hard-coded external endpoints or credential exfiltration, but you may want to review the full untruncated script in your environment for any additional behavior or platform compatibility issues (the script's openclaw lookup is Windows-focused and may fail on non-Windows systems). If you accept that cron jobs will be created and run by your OpenClaw agent, this skill is appropriate to install.