← Back to Skills Marketplace
jirboy

Weekly Checker

by JIRBOY · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
66
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install weekly-checker
Description
OpenClaw 每周例行检查 - 检查系统状态、安全风险、技能库健康,生成检查报告
Usage Guidance
Do not install or enable this skill until you verify a few things: (1) Ask the publisher for the implementation (tools/weekly_checker.py and any other scripts) and review that code — the SKILL.md references that script but it is not bundled. (2) Confirm how 飞书 notifications are configured (webhook or token) and never provide credentials without reviewing how they are used; the skill metadata declares no env vars for notifications. (3) Decide which filesystem paths the skill is allowed to read (logs, skills/, reports/) and restrict access or run the skill in a sandbox. (4) If you plan to enable automatic scheduling, require an explicit installation step that you can inspect (cron/task creation). (5) If you cannot get the source code or clear configuration for notifications and scheduling, treat this skill as untrusted and avoid granting it system-level access.
Capability Analysis
Type: OpenClaw Skill Name: weekly-checker Version: 1.0.0 The skill bundle describes a system auditing tool that performs high-risk activities, including scanning for plaintext keys, checking sensitive file permissions, and sending data to an external endpoint (Feishu/Lark). While these actions are consistent with the stated purpose of a 'weekly security check' in SKILL.md, the combination of credential hunting and automated reporting to external webhooks constitutes a significant security risk, especially as the primary execution logic in 'tools/weekly_checker.py' is not provided for verification.
Capability Assessment
Purpose & Capability
The name/description match the SKILL.md content: periodic checks of the gateway, skills library, Windows system, and security. However the skill references running a local script (tools/weekly_checker.py), reading skills/ and reports/ paths, and sending 飞书 notifications while the package declares no files, no required binaries, and no credentials. That gap means the implementation the SKILL.md expects is missing from the bundle.
Instruction Scope
SKILL.md instructs the agent to read system state, scan logs, check permissions, inspect the skills library, and notify via 飞书. These are broad file/system access operations and outbound notifications. The instructions also reference executing a local Python tool (python tools/weekly_checker.py) that is not included. The instructions grant broad discretion (automatic scheduling, scanning many paths) without specifying safe boundaries or required approvals.
Install Mechanism
No install spec and no code files are included — this minimizes the risk of the skill dropping code onto disk. However, the SKILL.md expects a tools/weekly_checker.py and scheduled task behavior that are not present; the lack of an install mechanism means those actions would rely on pre-existing host-side artifacts or external setup.
Credentials
The instructions require sending 飞书 (Feishu) notifications but the skill declares no environment variables, webhooks, or credentials. It also says it will inspect skill repository files and system logs but declares no config paths or permissions. The absence of declared credentials/paths is inconsistent with the actions described and could hide required secrets or setup steps.
Persistence & Privilege
The skill is not marked always:true and is user-invocable; autonomous invocation is allowed (disable-model-invocation:false). SKILL.md mentions automatic weekly execution and scheduling, but no mechanism to install or enable a scheduler is provided. This is not itself malicious but is a missing detail the user should verify.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install weekly-checker
  3. After installation, invoke the skill by name or use /weekly-checker
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of weekly-checker. - Automates weekly system checks for OpenClaw, including gateway, skills, security, and Windows system health. - Generates detailed JSON reports and Feishu notifications for issues found. - Separates issue severity: immediate alerts for critical problems and summary notifications for warnings. - Supports both scheduled (Monday 09:00) and manual triggering. - Outlines clear notification and issue handling procedures.
Metadata
Slug weekly-checker
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Weekly Checker?

OpenClaw 每周例行检查 - 检查系统状态、安全风险、技能库健康,生成检查报告. It is an AI Agent Skill for Claude Code / OpenClaw, with 66 downloads so far.

How do I install Weekly Checker?

Run "/install weekly-checker" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Weekly Checker free?

Yes, Weekly Checker is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Weekly Checker support?

Weekly Checker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Weekly Checker?

It is built and maintained by JIRBOY (@jirboy); the current version is v1.0.0.

💬 Comments