扫描报告
5 /100
reminder
Natural-language reminder secretary: capture events into git-synced workspace, schedule Telegram reminders via OpenClaw cron, and answer 'what's coming up' queries.
Purely declarative skill (documentation + template only) with no executable code, scripts, or binary artifacts — all behavior is clearly documented in SKILL.md.
可以安装
Approve for use. No code execution or sensitive operations are present.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | READ | ✓ 一致 | SKILL.md: Reads/writes ~/.openclaw/workspace/reminders/events.yml |
| 命令执行 | NONE | NONE | — | No shell execution found in any file |
| 网络访问 | NONE | NONE | — | No network requests, URLs, or IPs in any file |
| 环境变量 | NONE | NONE | — | Only documented env vars REMINDER_TZ and REMINDER_OFFSETS_MINUTES; no credential… |
| 技能调用 | NONE | NONE | — | Skill self-invocation implied by cron scheduling (OpenClaw platform) |
目录结构
3 文件 · 3.0 KB · 82 行 Markdown 1f · 72L
JSON 1f · 5L
YAML 1f · 5L
├─
▾
assets
│ └─
events.template.yml
YAML
├─
_meta.json
JSON
└─
SKILL.md
Markdown
安全亮点
✓ No executable scripts or code files present
✓ All declared behavior is accurately described in SKILL.md
✓ No obfuscation, base64, or encoded payloads
✓ No credential harvesting or sensitive data access
✓ No remote script execution or curl|bash patterns
✓ No data exfiltration or C2 communication
✓ Only reads/writes a well-defined workspace YAML file (documented)
✓ Config env vars are benign (timezone, offsets only)
✓ No hidden instructions or prompt injection vectors
✓ Template file is an empty, safe YAML structure