daily-review-assistant 安全扫描报告 — 可信 | ClawSafe

5 /100

daily-review-assistant

定时回顾更新助手。定时（中午 12 点、晚上 23:50）自动回顾今日工作，查漏补缺，更新记忆和知识库。

A legitimate daily review automation tool with clear documentation, standard shell scripts, and operations fully aligned with stated functionality. No malicious indicators found.

技能名称daily-review-assistant

分析耗时40.1s

引擎pi

✓

可以安装

This skill is safe to use. All operations are documented and match the described functionality of a daily work review assistant.

资源类型	声明权限	推断权限	状态	证据
文件系统	`WRITE`	`WRITE`	✓ 一致	skill.sh:1 - Creates/updates MEMORY.md, daily logs, knowledge index files
命令执行	`WRITE`	`WRITE`	✓ 一致	skill.sh:1 - Uses bash for git commands and cron management
网络访问	`READ`	`READ`	✓ 一致	scripts/knowledge-updater.sh:67 - git push to remote origin
环境变量	`NONE`	`READ`	✓ 一致	scripts/lib/config.sh:33-60 - Reads config from env vars
技能调用	`NONE`	`NONE`	—	No skill invocation found
剪贴板	`NONE`	`NONE`	—	No clipboard access
浏览器	`NONE`	`NONE`	—	No browser access
数据库	`NONE`	`NONE`	—	No database access

2 项发现

🔗

中危外部 URL 外部 URL

https://clawhub.com/skills/daily-review-assistant

package.json:25

📧

提示邮箱邮箱地址

[email protected]

docs/GIT_PUSH_STRATEGY.md:78

目录结构

12 文件 · 46.4 KB · 1432 行

Shell 7f · 1002L Markdown 3f · 347L JSON 2f · 83L

├─ ▾ 📁 config

│ └─ 📋 config.example.json JSON 35L · 754 B

├─ ▾ 📁 docs

│ └─ 📝 GIT_PUSH_STRATEGY.md Markdown 84L · 1.5 KB

├─ ▾ 📁 scripts

│ ├─ ▾ 📁 lib

│ │ └─ 🔧 config.sh Shell 143L · 5.2 KB

│ ├─ 🔧 gap-analyzer.sh Shell 181L · 6.1 KB

│ ├─ 🔧 install.sh Shell 77L · 4.0 KB

│ ├─ 🔧 knowledge-updater.sh Shell 138L · 5.0 KB

│ ├─ 🔧 memory-updater.sh Shell 144L · 4.1 KB

│ └─ 🔧 uninstall.sh Shell 61L · 2.6 KB

├─ 📋 package.json JSON 48L · 1.3 KB

├─ 📝 README.md Markdown 116L · 2.7 KB

├─ 📝 SKILL.md Markdown 147L · 4.2 KB

└─ 🔧 skill.sh Shell 258L · 9.0 KB

安全亮点

✓ All functionality explicitly declared in SKILL.md matches actual code behavior

✓ No base64 encoding, obfuscation, or anti-analysis techniques

✓ No credential harvesting or sensitive path access (~/.ssh, ~/.aws, .env)

✓ No external script downloads (curl|bash patterns)

✓ Pure shell implementation with no external dependencies

✓ Git operations scoped to configured workspace only

✓ Crontab manipulation clearly documented

✓ Graceful error handling prevents data corruption