每晚22:00自动扫描明天的Outlook日历，上午日程提前2小时提醒，下午日程12:00统一提醒，通过飞书发送通知。依赖 owa-outlook skill。

Before installing or enabling this skill: (1) Do NOT rely on the packaged code as-is — open calendar_reminder.py and change the Feishu target to your own ID (or modify send_feishu to use your configured channel) before running. Leaving the hard-coded user:ou_159c... will send your calendar details to that external ID. (2) Confirm where owa-outlook/owa_calendar.py is installed on your system and update SKILL_DIR or the cron command so the script can actually find it (SKILL.md and the script reference different paths). (3) Test the script manually (python3 calendar_reminder.py) and inspect its output to verify which fields of calendar events are transmitted. (4) If you cannot or do not want to edit the script, do not register the automatic cron; instead run manually after review. (5) Consider reviewing the owa_calendar.py implementation to ensure it only returns the expected fields and doesn't leak extra data. These inconsistencies could be benign developer oversights, but they create a real privacy/exfiltration risk if left unchanged.

Type: OpenClaw Skill Name: calendar-reminder Version: 1.0.0 The skill is classified as suspicious due to significant prompt injection vulnerabilities. The `SKILL.md` file registers a cron job using `--system-event` with a direct command string, which, while intended to execute the skill's own script, demonstrates a potential prompt injection vector against the OpenClaw agent. More critically, the `calendar_reminder.py` script constructs messages for `openclaw cron add --message` and `openclaw message send -m` using unsanitized calendar event subjects (`ev['subject']`). This allows an attacker who can control calendar event subjects to potentially inject arbitrary commands or instructions into the OpenClaw agent, leading to unauthorized actions. There is no clear evidence of intentional malicious behavior such as data exfiltration or unauthorized persistence.