← 返回 Skills 市场
AP Daily Report
作者
juncaijames
· GitHub ↗
· v1.0.0
· MIT-0
102
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install ap-daily-report
功能描述
Generate and deliver a daily Agentic Payment news briefing covering Visa dynamics, China/APAC market, competitor protocols, and regulatory updates for Visa G...
使用说明 (SKILL.md)
Agentic Payment Daily Report
Daily briefing for Visa Greater China Agentic Payment lead (Visa Intelligent Commerce).
Workflow
0. Deduplicate against previous reports
Before searching, read the previous 2 days' reports from Obsidian:
/Users/juncai/Documents/OBVault-MacMini/02_work/Visa工作/VIC/Agentic-Payment-Daily-Report/YYYY-MM-DD.md
Extract each reported news item's headline and source URL. During curation (step 1), filter out items that are:
- Exact duplicate: same URL already reported
- Near duplicate: same topic/event with no meaningful new development
- Keep if updated: same topic but significant new development (merge update into existing entry)
1. Search & Curate (max 10 items)
Search for Agentic Payment news. Priority order:
- Visa dynamics — Agentic Ready, VIC, Trusted Agent Protocol, APAC/China partnerships
- China/APAC market — agentic payment adoption, pilots, launches
- Competitor protocols — Mastercard Agent Pay, Stripe MPP/Tempo, Google AP2, Coinbase x402, MoonPay OWS
- Regulatory & data — compliance signals, industry data, trend analysis
2. Format each item
### [Tag] Headline
- **摘要 / Summary:** 2-3 sentences (bilingual if English source)
- 💡 **So What:** Why this matters for Visa Greater China VIC
- 🎯 **Action Item:** What to consider doing based on this
- 🔗 Source: [title](url)
Tags: 🔴 重点必读 / 🟡 值得关注 / 🟢 背景信息
3. Deliver
A) Write to Obsidian
Path: /Users/juncai/Documents/OBVault-MacMini/02_work/Visa工作/VIC/Agentic-Payment-Daily-Report/YYYY-MM-DD.md
Frontmatter:
---
title: "Agentic Payment 日报 - YYYY-MM-DD"
date: YYYY-MM-DD
tags: agentic-payment, visa, daily-report
---
B) Generate PDF
node scripts/convert-ap-report.mjs \x3Cobsidian-md-path> "/tmp/Agentic Payment日报-YYYY-MM-DD.pdf"
C) Push to WeChat
- Send PDF as document via
messagetool:action: send,channel: openclaw-weixin,target: [email protected],accountId: 26eb1d27b81b-im-bot,media: /tmp/Agentic Payment日报-YYYY-MM-DD.pdf,forceDocument: true - Output report text as final reply (system will auto-deliver via announce)
Cron Setup
Schedule: 50 8 * * * Asia/Shanghai (delivered to WeChat).
To create/update the cron job, use the payload message below as the agent prompt, with delivery configured for the target WeChat account.
Cron Prompt
按照 agentic-payment-daily skill 生成今日日报。
步骤A：写入 Obsidian（路径 YYYY-MM-DD.md，短横线格式）→ echo "STEP A DONE"
步骤B：生成 PDF → echo "STEP B DONE"
步骤C：微信推送 PDF（channel: openclaw-weixin, target: [email protected], accountId: 26eb1d27b81b-im-bot）→ echo "STEP C DONE"
步骤D：输出日报全文 → echo "STEP D DONE"
如果任何步骤失败，修复并重试。
Notes
- Timeout budget: ~10 minutes (search + write + PDF + push)
- If WeChat push fails, ensure Obsidian file and PDF are still saved (they are the primary artifacts)
- Quality over quantity
安全使用建议
This skill appears to do what it says, but exercise caution before installing. Key points:
- It reads and writes files in a hardcoded Obsidian path (/Users/juncai/...). If that path does not belong to you, update the path before running or decline installation.
- It will send the generated PDF to a hardcoded WeChat recipient and accountId. Confirm you trust that recipient and change the target if needed.
- The bundled script expects Node and external renderers (md-to-pdf and/or puppeteer) but the skill declares no required binaries; ensure your runtime has Node and those packages installed or the PDF step will fail.
- The metadata shows an owner mismatch between registry and _meta.json — ask the publisher who maintains this skill and why the IDs differ before trusting it.
- If you plan to enable scheduled/autonomous runs (cron), remember this will repeatedly read local vault files and transmit reports externally; review and sanitize any sensitive content before enabling.
If you decide to use this skill: update/remove hardcoded paths/recipient, install Node/md-to-pdf/puppeteer in a controlled environment, and test once manually to confirm behavior before enabling automated runs.
功能分析
Type: OpenClaw Skill
Name: ap-daily-report
Version: 1.0.0
The skill bundle is classified as suspicious due to hardcoded delivery targets and a critical command injection vulnerability. SKILL.md contains hardcoded local file paths for a specific user (/Users/juncai/) and directs report delivery to a specific WeChat recipient ([email protected]), which could lead to unauthorized data disclosure if used by others. Additionally, scripts/convert-ap-report.mjs is vulnerable to shell injection via the execSync function, as it fails to sanitize the output file path argument before execution.
能力评估
Purpose & Capability
The skill's actions (read previous reports, create a markdown file in an Obsidian vault, render to PDF, and push to WeChat) are coherent with the declared purpose of generating and delivering a daily report. However, the SKILL.md contains a hardcoded absolute Obsidian path (/Users/juncai/...), a hardcoded WeChat recipient and accountId, and the _meta.json ownerId differs from the registry ownerId — these are user-specific items that make the skill appear tailored for a particular person's environment rather than a generic, shareable skill.
Instruction Scope
The runtime instructions explicitly tell the agent to read and write files under a specific user's Obsidian vault path and to send a PDF to a specific external WeChat account. Reading/writing the user's local vault is within the stated purpose but is sensitive: it accesses local documents and will transmit the generated PDF externally. The instructions also assume a 'message' tool exists and that the agent has credentials to push to that WeChat account (these credentials are not declared or scoped in the skill), which expands the real-world side-effects beyond simple local formatting.
Install Mechanism
There is no install spec (instruction-only), but the included script (convert-ap-report.mjs) invokes external tools via execSync: it expects Node to be present and attempts to use 'md-to-pdf' and falls back to launching puppeteer. The skill declares no required binaries or packages, so there's a mismatch between declared requirements (none) and actual runtime dependencies (node, md-to-pdf, puppeteer and their transitive dependencies). That mismatch could cause failures or surprise the user when the agent attempts to install/execute missing tooling.
Credentials
requires.env lists no credentials, but the skill will transmit content to a hardcoded external WeChat target and accountId. The skill relies on the agent environment's messaging tool and its credentials without declaring or scoping them. While sending the report is part of the purpose, the lack of clear credential declarations and the presence of hardcoded external targets increases risk of unintended data exfiltration if the skill is reused in a different environment.
Persistence & Privilege
The skill is not marked always:true and does not request permanent system-wide privileges. It suggests setting up a cron job but does not itself contain an install script that modifies system cron or other agent configs. Autonomous invocation is allowed (platform default), which is expected for a scheduled report skill; this combination is reasonable but the user should be aware that the skill's cron instructions enable repeated automated reads and external sends.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install ap-daily-report - 安装完成后，直接呼叫该 Skill 的名称或使用
/ap-daily-report触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: Agentic Payment daily news briefing with dedup, Obsidian, PDF, WeChat delivery
元数据
常见问题
AP Daily Report 是什么？
Generate and deliver a daily Agentic Payment news briefing covering Visa dynamics, China/APAC market, competitor protocols, and regulatory updates for Visa G... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 102 次。
如何安装 AP Daily Report？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ap-daily-report」即可一键安装，无需额外配置。
AP Daily Report 是免费的吗？
是的，AP Daily Report 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
AP Daily Report 支持哪些平台？
AP Daily Report 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 AP Daily Report？
由 juncaijames（@juncaijames）开发并维护，当前版本 v1.0.0。
推荐 Skills