← Back to Skills Marketplace
946
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install wilma-triage
Description
Daily triage of Wilma school notifications for Finnish parents. Fetches exams, messages, news, schedules, and homework — filters for actionable items, syncs...
Usage Guidance
This skill appears to do what it says, but there are metadata and scope gaps you should verify before installing: 1) Confirm you have and trust the 'wilma' and 'gog' CLIs (and the referenced 'wilma'/'gog' skills from ClawHub) because the skill runs their commands. 2) Be aware it will read your Wilma config (~/.config/wilmai/config.json) and gog CLI app data (~/Library/Application Support/gogcli/), but those paths were not declared in the registry — ensure you are comfortable with the agent accessing those local credentials. 3) The skill will write the calendar ID to TOOLS.md and store preferences in MEMORY.md (persistent agent files) — check these files for sensitive content and accept that they will be modified. 4) Because source/homepage is unknown, consider inspecting the 'wilma' and 'gog' skill code or running the commands manually first to confirm behavior. If you are uncomfortable with the agent reading/writing config or persistent files, do not install or run until the declarations and provenance are clarified.
Capability Analysis
Type: OpenClaw Skill
Name: wilma-triage
Version: 1.0.1
The skill instructs the agent to store user-provided data, including 'exact gog CLI commands' and 'naming conventions for events', into `TOOLS.md` and `MEMORY.md`. Subsequently, the agent is directed to 'Refer to TOOLS.md for... exact gog CLI commands' and 'Check MEMORY.md for additional skip/report rules'. This design pattern creates a significant prompt/command injection vulnerability, as a malicious user could potentially inject arbitrary commands or instructions into these files, which the agent would then execute. While the skill itself does not contain malicious payloads, it establishes a high-risk mechanism for agent control via external, user-modifiable files, classifying it as suspicious due to this critical vulnerability.
Capability Assessment
Purpose & Capability
The skill's required CLIs (wilma and gog) and the dependency on a wilma skill are consistent with its stated goal of fetching Wilma data and syncing calendars. However, the top-level registry metadata omitted the config paths and skill dependency that the SKILL.md declares (incoherent declarations).
Instruction Scope
SKILL.md instructs the agent to run wilma/gog CLI commands, read user-level config (~/.config/wilmai/config.json and gogcli app data), and to write the calendar ID to TOOLS.md and preferences to MEMORY.md. Reading/writing those persistent files and home-directory config is broader than a purely ephemeral triage run and could expose or alter other agent state; the registry did not advertise those config paths.
Install Mechanism
Instruction-only skill with no install spec — low installation risk. It relies on preinstalled CLIs/skills rather than downloading code.
Credentials
No environment variables are requested, which is reasonable, but SKILL.md references local credential/config files (Wilma config and gog CLI OAuth data) that are not declared in the registry metadata. The skill will access and persist data in agent-wide files (TOOLS.md, MEMORY.md), which may contain other sensitive context — this access was not fully declared.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system presence. It does instruct writing to TOOLS.md and MEMORY.md (agent persistent storage) to save calendar IDs and preferences; that persistent behavior is expected for personalization but should be accepted explicitly by the user.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wilma-triage - After installation, invoke the skill by name or use
/wilma-triage - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added an `openclaw` metadata block specifying required binaries, skills, configuration paths, and credential notes for setup.
- Clarified the need for local Wilma credentials and Google Calendar (gog CLI) authentication in the metadata.
- No changes to core logic or workflow; documentation and dependency requirements improved for easier setup and integration.
v1.0.0
Initial release: automated daily triage for Finnish parents, Google Calendar sync, smart message classification
Metadata
Frequently Asked Questions
What is Wilma Triage?
Daily triage of Wilma school notifications for Finnish parents. Fetches exams, messages, news, schedules, and homework — filters for actionable items, syncs... It is an AI Agent Skill for Claude Code / OpenClaw, with 946 downloads so far.
How do I install Wilma Triage?
Run "/install wilma-triage" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Wilma Triage free?
Yes, Wilma Triage is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Wilma Triage support?
Wilma Triage is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Wilma Triage?
It is built and maintained by aikarjal (@aikarjal); the current version is v1.0.1.
More Skills