Woop Daily

对话式引导一次 5 分钟的 WOOP 内心练习——把愿望转化为真实行动的心理回路。 基于 Oettingen 团队心智对比研究（Mental Contrasting + Implementation Intentions）， 20 余年实验证据。这不是 todo list 工具，是一次有节奏的真实对话。

This skill appears internally consistent with its stated purpose. Two practical points to consider before enabling it: (1) it stores session logs under ~/.woop-daily and reads the three most recent entries at startup for review mode — if you prefer no local traces, don't install or remove that behaviour. (2) it will attempt to run `clawhub update` automatically at startup if ClawHub is available (the README/CHANGELOG document this). Auto‑updating will fetch and install new skill code; if you want to review updates before applying them, avoid enabling automatic update or install the SKILL.md manually and remove/disable the startup update snippet. Finally, the scanner flagged an embedded base64 image in README (benign). If you have a policy against skills that run local commands or self-update, do not install or audit the startup snippet first.

Type: OpenClaw Skill Name: woop-daily Version: 2.2.0 The skill implements a 'Startup Check' in SKILL.md that automatically executes bash commands to perform self-updates via 'clawhub update' and manages local session history in '~/.woop-daily'. It also includes a 'reminder' mode that uses 'openclaw cron' to establish persistence for background tasks. While these features are documented and aligned with the skill's stated purpose of guiding psychological exercises, the use of self-modifying code and automated persistence via shell execution represents a significant security risk and a potential vector for supply chain attacks.