← Back to Skills Marketplace
Smart Surprise
by
TuringCorp.net
· GitHub ↗
· v1.1.0
· MIT-0
88
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install smart-surprise
Description
Proactively engages users with personalized casual messages at random intervals, learning preferences to deliver warm, varied conversations and check-ins.
Usage Guidance
What to consider before installing: 1) This skill will create repeating, self-managed cron jobs that run the agent autonomously and send messages to the configured channel — verify you want the assistant to reach out without per-message consent. 2) It will read/write files in ~/.openclaw/workspace/skills/smart-surprise/ (config.json, topics.md, next_run.json) and will silently update topics.md after each run; if you prefer manual control, do not enable. 3) If you enable the calendar topic, the skill may read Google OAuth tokens from ~/.openclaw/secrets/google-calendar.json — only provide those tokens if you trust the skill. 4) Before activating, set conservative min/max intervals and quiet hours in config.json and test with an isolated channel or test account. 5) To stop the skill, remove its cron jobs (openclaw cron list / rm) and delete ~/.openclaw/workspace/skills/smart-surprise. 6) If you are unsure, inspect or back up topics.md and config.json and monitor cron jobs/logs for unexpected behavior. If you want lower risk, avoid granting calendar credentials and keep longer intervals or run manually rather than using the self-perpetuating cron chain.
Capability Analysis
Type: OpenClaw Skill
Name: smart-surprise
Version: 1.1.0
The skill implements a 'proactive companion' using a self-perpetuating chain of one-shot cron jobs (via `openclaw cron add`) to ensure it runs indefinitely. It explicitly requests access to sensitive Google Calendar OAuth tokens and helper scripts (`~/.openclaw/secrets/google-calendar.json` and `~/.openclaw/scripts/google-calendar.py`) to provide calendar reminders. While these high-risk behaviors (persistence, credential access, and automated messaging) are documented as part of the skill's functionality in `SKILL.md` and `setup.md`, they represent a significant attack surface that could be easily repurposed for data exfiltration or unauthorized persistence.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's name and description match what the SKILL.md instructs: composing personalized messages, sending them via openclaw message send, and scheduling cron jobs. Required artifacts (config.json, topics.md, next_run.json) are consistent with a proactive messaging companion. No unrelated environment variables or binaries are requested.
Instruction Scope
Runtime instructions instruct the agent to read and write files under ~/.openclaw/workspace/skills/smart-surprise/, silently update topics.md on every run, and to create an indefinite chain of cron jobs that autonomously trigger the agent. Silent updates to user preference files and the permanent self-perpetuating cron chain are within the skill's purpose but are significant scope/surprise for non-technical users and could be used to persistently send messages or change local state without explicit per-run consent.
Install Mechanism
No install spec or remote downloads; this is an instruction-only skill with only local text files. That minimizes installer risk (no arbitrary code fetched at install time).
Credentials
The skill declares no required env vars or primary credential (good). It does, however, optionally read Google Calendar OAuth credentials from ~/.openclaw/secrets/google-calendar.json if the calendar topic is enabled — that is expected for calendar integration but involves sensitive tokens. The skill also assumes the OpenClaw messaging channels (Telegram/Discord/etc.) are already configured at the platform level so the agent can call openclaw message send; those platform credentials are not requested here but will be used by the cron-run agent.
Persistence & Privilege
Although always:false, the skill explicitly instructs creating a self-perpetuating sequence of cron jobs that run indefinitely and can autonomously send messages and modify topics.md. This grants ongoing autonomous presence and action on the host. Combined with silent updates and optional access to calendar credentials, this persistent capability is a notable privilege and user-risk vector.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install smart-surprise - After installation, invoke the skill by name or use
/smart-surprise - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
**Smart Surprise v1.1.0 Changelog**
- Added explicit documentation for Google Calendar OAuth credential integration and secure handling in SKILL.md.
- Updated file structure and reference sections to reflect new credential requirements.
- Improved clarity in configuration and credential setup instructions.
- Minor documentation cleanups for accuracy and completeness.
- No functional code changes; updates focused on documentation and setup guidance.
v1.0.0
Initial release: proactive AI companion that sends personalized surprise messages via self-perpetuating cron chains
Metadata
Frequently Asked Questions
What is Smart Surprise?
Proactively engages users with personalized casual messages at random intervals, learning preferences to deliver warm, varied conversations and check-ins. It is an AI Agent Skill for Claude Code / OpenClaw, with 88 downloads so far.
How do I install Smart Surprise?
Run "/install smart-surprise" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Smart Surprise free?
Yes, Smart Surprise is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Smart Surprise support?
Smart Surprise is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Smart Surprise?
It is built and maintained by TuringCorp.net (@turingcorp-net); the current version is v1.1.0.
More Skills