← Back to Skills Marketplace
AP Daily Report
by
juncaijames
· GitHub ↗
· v1.0.0
· MIT-0
102
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install ap-daily-report
Description
Generate and deliver a daily Agentic Payment news briefing covering Visa dynamics, China/APAC market, competitor protocols, and regulatory updates for Visa G...
README (SKILL.md)
Agentic Payment Daily Report
Daily briefing for Visa Greater China Agentic Payment lead (Visa Intelligent Commerce).
Workflow
0. Deduplicate against previous reports
Before searching, read the previous 2 days' reports from Obsidian:
/Users/juncai/Documents/OBVault-MacMini/02_work/Visa工作/VIC/Agentic-Payment-Daily-Report/YYYY-MM-DD.md
Extract each reported news item's headline and source URL. During curation (step 1), filter out items that are:
- Exact duplicate: same URL already reported
- Near duplicate: same topic/event with no meaningful new development
- Keep if updated: same topic but significant new development (merge update into existing entry)
1. Search & Curate (max 10 items)
Search for Agentic Payment news. Priority order:
- Visa dynamics — Agentic Ready, VIC, Trusted Agent Protocol, APAC/China partnerships
- China/APAC market — agentic payment adoption, pilots, launches
- Competitor protocols — Mastercard Agent Pay, Stripe MPP/Tempo, Google AP2, Coinbase x402, MoonPay OWS
- Regulatory & data — compliance signals, industry data, trend analysis
2. Format each item
### [Tag] Headline
- **摘要 / Summary:** 2-3 sentences (bilingual if English source)
- 💡 **So What:** Why this matters for Visa Greater China VIC
- 🎯 **Action Item:** What to consider doing based on this
- 🔗 Source: [title](url)
Tags: 🔴 重点必读 / 🟡 值得关注 / 🟢 背景信息
3. Deliver
A) Write to Obsidian
Path: /Users/juncai/Documents/OBVault-MacMini/02_work/Visa工作/VIC/Agentic-Payment-Daily-Report/YYYY-MM-DD.md
Frontmatter:
---
title: "Agentic Payment 日报 - YYYY-MM-DD"
date: YYYY-MM-DD
tags: agentic-payment, visa, daily-report
---
B) Generate PDF
node scripts/convert-ap-report.mjs \x3Cobsidian-md-path> "/tmp/Agentic Payment日报-YYYY-MM-DD.pdf"
C) Push to WeChat
- Send PDF as document via
messagetool:action: send,channel: openclaw-weixin,target: [email protected],accountId: 26eb1d27b81b-im-bot,media: /tmp/Agentic Payment日报-YYYY-MM-DD.pdf,forceDocument: true - Output report text as final reply (system will auto-deliver via announce)
Cron Setup
Schedule: 50 8 * * * Asia/Shanghai (delivered to WeChat).
To create/update the cron job, use the payload message below as the agent prompt, with delivery configured for the target WeChat account.
Cron Prompt
按照 agentic-payment-daily skill 生成今日日报。
步骤A：写入 Obsidian（路径 YYYY-MM-DD.md，短横线格式）→ echo "STEP A DONE"
步骤B：生成 PDF → echo "STEP B DONE"
步骤C：微信推送 PDF（channel: openclaw-weixin, target: [email protected], accountId: 26eb1d27b81b-im-bot）→ echo "STEP C DONE"
步骤D：输出日报全文 → echo "STEP D DONE"
如果任何步骤失败，修复并重试。
Notes
- Timeout budget: ~10 minutes (search + write + PDF + push)
- If WeChat push fails, ensure Obsidian file and PDF are still saved (they are the primary artifacts)
- Quality over quantity
Usage Guidance
This skill appears to do what it says, but exercise caution before installing. Key points:
- It reads and writes files in a hardcoded Obsidian path (/Users/juncai/...). If that path does not belong to you, update the path before running or decline installation.
- It will send the generated PDF to a hardcoded WeChat recipient and accountId. Confirm you trust that recipient and change the target if needed.
- The bundled script expects Node and external renderers (md-to-pdf and/or puppeteer) but the skill declares no required binaries; ensure your runtime has Node and those packages installed or the PDF step will fail.
- The metadata shows an owner mismatch between registry and _meta.json — ask the publisher who maintains this skill and why the IDs differ before trusting it.
- If you plan to enable scheduled/autonomous runs (cron), remember this will repeatedly read local vault files and transmit reports externally; review and sanitize any sensitive content before enabling.
If you decide to use this skill: update/remove hardcoded paths/recipient, install Node/md-to-pdf/puppeteer in a controlled environment, and test once manually to confirm behavior before enabling automated runs.
Capability Analysis
Type: OpenClaw Skill
Name: ap-daily-report
Version: 1.0.0
The skill bundle is classified as suspicious due to hardcoded delivery targets and a critical command injection vulnerability. SKILL.md contains hardcoded local file paths for a specific user (/Users/juncai/) and directs report delivery to a specific WeChat recipient ([email protected]), which could lead to unauthorized data disclosure if used by others. Additionally, scripts/convert-ap-report.mjs is vulnerable to shell injection via the execSync function, as it fails to sanitize the output file path argument before execution.
Capability Assessment
Purpose & Capability
The skill's actions (read previous reports, create a markdown file in an Obsidian vault, render to PDF, and push to WeChat) are coherent with the declared purpose of generating and delivering a daily report. However, the SKILL.md contains a hardcoded absolute Obsidian path (/Users/juncai/...), a hardcoded WeChat recipient and accountId, and the _meta.json ownerId differs from the registry ownerId — these are user-specific items that make the skill appear tailored for a particular person's environment rather than a generic, shareable skill.
Instruction Scope
The runtime instructions explicitly tell the agent to read and write files under a specific user's Obsidian vault path and to send a PDF to a specific external WeChat account. Reading/writing the user's local vault is within the stated purpose but is sensitive: it accesses local documents and will transmit the generated PDF externally. The instructions also assume a 'message' tool exists and that the agent has credentials to push to that WeChat account (these credentials are not declared or scoped in the skill), which expands the real-world side-effects beyond simple local formatting.
Install Mechanism
There is no install spec (instruction-only), but the included script (convert-ap-report.mjs) invokes external tools via execSync: it expects Node to be present and attempts to use 'md-to-pdf' and falls back to launching puppeteer. The skill declares no required binaries or packages, so there's a mismatch between declared requirements (none) and actual runtime dependencies (node, md-to-pdf, puppeteer and their transitive dependencies). That mismatch could cause failures or surprise the user when the agent attempts to install/execute missing tooling.
Credentials
requires.env lists no credentials, but the skill will transmit content to a hardcoded external WeChat target and accountId. The skill relies on the agent environment's messaging tool and its credentials without declaring or scoping them. While sending the report is part of the purpose, the lack of clear credential declarations and the presence of hardcoded external targets increases risk of unintended data exfiltration if the skill is reused in a different environment.
Persistence & Privilege
The skill is not marked always:true and does not request permanent system-wide privileges. It suggests setting up a cron job but does not itself contain an install script that modifies system cron or other agent configs. Autonomous invocation is allowed (platform default), which is expected for a scheduled report skill; this combination is reasonable but the user should be aware that the skill's cron instructions enable repeated automated reads and external sends.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ap-daily-report - After installation, invoke the skill by name or use
/ap-daily-report - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Agentic Payment daily news briefing with dedup, Obsidian, PDF, WeChat delivery
Metadata
Frequently Asked Questions
What is AP Daily Report?
Generate and deliver a daily Agentic Payment news briefing covering Visa dynamics, China/APAC market, competitor protocols, and regulatory updates for Visa G... It is an AI Agent Skill for Claude Code / OpenClaw, with 102 downloads so far.
How do I install AP Daily Report?
Run "/install ap-daily-report" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is AP Daily Report free?
Yes, AP Daily Report is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does AP Daily Report support?
AP Daily Report is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created AP Daily Report?
It is built and maintained by juncaijames (@juncaijames); the current version is v1.0.0.
More Skills