Birthday

管理組織成員（家人、同事、親戚等）的個人資料、農曆/新曆生日及紀念日，並用 OpenClaw cron 設置自動提醒。Use when: (1) 添加/編輯成員資料, (2) 設置生日或紀念日提醒, (3) 更新農曆對應的新曆日期, (4) 查看即將到來的重要日子, (5) 管理多個組織的成員。NOT for:...

This skill appears coherent with its purpose, but review these practical points before installing: - Data persistence & privacy: The skill stores personal data (names, phone numbers, notes, birthdays) under ~/.openclaw/workspace/users/{SESSION_KEY}. Ensure you are comfortable with that storage location and that the host environment is secure and backed up as you need. - Session file contents: The skill may read ~/.openclaw/session.json to obtain a session key. Verify that session.json does not contain secrets you don't want the skill to access. The skill includes sanitation and a realpath check, which reduces directory-traversal risk. - Dependencies: The skill lists the Python package lunardate (GPL-3.0). Because there is no automated install spec, make sure the runtime has the dependency installed (pip install lunardate) and be aware of the dependency's license implications. - Scheduled tasks delivery: The skill uses OpenClaw scheduled-tasks tools to register reminders. Confirm how scheduled tasks deliver reminders in your environment (e.g., the OpenClaw runtime or a connected bot) so you know where notifications go and who can read them. - Confirm completeness: The provided SKILL.md excerpt is coherent, but if you need to audit behavior fully, request the complete SKILL.md or verify the actual packaged file contents to ensure no hidden instructions or network calls are present. If these points are acceptable, the skill's permissions and instructions are proportionate to its stated purpose.

Type: OpenClaw Skill Name: mybirthday Version: 1.0.3 The 'member-manager' skill is a legitimate tool for managing personal contact data, birthdays, and anniversaries. It includes proactive security measures in its instructions (SKILL.md), such as session key sanitization using regex and path traversal validation using 'os.path.realpath' to ensure data isolation between users. The logic focuses on local JSON storage and the use of standard scheduled task tools for reminders, with no evidence of data exfiltration, malicious execution, or prompt-injection attacks.