OpenClaw Daily Briefing

整合天气、日程、待办、新闻和通勤建议，生成工作日早晨核心信息的一条简明晨间简报。

This skill's purpose (daily morning briefing) is reasonable and the included script is benign, but it advertises integrations (WeCom calendar/todo and third-party news) while declaring no credentials or configuration. Before installing or enabling: 1) Ask the publisher which credentials/config are required and how/where tokens are stored (environment vars, secret store, agent config). 2) Review the dependent skills (wecom-schedule, wecom-get-todo-list, web-search-pro) to see what permissions and credentials they require and whether they'll access calendar/todo content. 3) Be aware that 'location: auto' and the weather call (wttr.in) may expose your location or IP to external services—confirm privacy expectations. 4) Because the source/homepage is unknown, prefer installing in a limited test environment and monitor outbound network calls (to wttr.in and any news/search endpoints). If sensitive corporate calendar/todo data is involved, ensure those integrations meet your org's security policies before granting access.

Type: OpenClaw Skill Name: openclaw-daily-briefing Version: 1.0.0 The skill bundle is a standard implementation of a daily briefing tool. The shell script (scripts/daily-briefing.sh) uses a legitimate external service (wttr.in) to fetch weather data and contains placeholders for other integrations. No malicious behavior, data exfiltration, or prompt injection attempts were found.