← 返回 Skills 市场
4625
总下载
3
收藏
52
当前安装
6
版本数
在 OpenClaw 中安装
/install daily-briefing
功能描述
Generates a warm, compact daily briefing with weather, calendar, reminders, birthdays, and important emails for cron or chat delivery.
安全使用建议
Review before installing, especially on shared machines or automated setups. Enable only the integrations you need, treat email summaries and cron logs as sensitive, avoid storing mail passwords in plain config where possible, and clean or restrict /tmp/daily_briefing_data.json after use.
功能分析
Type: OpenClaw Skill
Name: daily-briefing
Version: 1.0.5
The skill is classified as suspicious due to two significant vulnerabilities found in `scripts/daily_briefing_orchestrator.sh`. Firstly, the `emails.icloudPassword` is read from the user's configuration and written in cleartext into the `/tmp/daily_briefing_data.json` file, exposing a sensitive credential on disk. Secondly, the `REMINDERS_DUE_FILTER` configuration value is used directly in a `remindctl` command without proper sanitization, creating a shell injection vulnerability if an attacker can modify the `~/.openclaw/openclaw.json` configuration file. While the skill's stated purpose is benign, these flaws present exploitable risks for sensitive data exposure and arbitrary command execution.
能力评估
Purpose & Capability
Weather, calendars, reminders, birthdays, contacts, and email metadata fit the stated daily-briefing purpose, but the enabled integrations can expose a broad view of the user's private life.
Instruction Scope
The instructions disclose the runner, JSON output, and email classification, but they under-emphasize that contact/email/calendar/reminder data may be placed in agent context, stdout, cron logs, and a local temp JSON file.
Install Mechanism
The installer creates a local runner script, marks bundled scripts executable, and does not show hidden downloads, unrelated persistence, or destructive installation behavior.
Credentials
macOS Contacts, Calendar, Reminders, authenticated Google/iCloud tooling, and wttr.in weather requests are mostly purpose-aligned, but the skill has high-impact personal-data access and limited containment guidance.
Persistence & Privilege
The orchestrator writes aggregated personal data to predictable /tmp paths, publishes /tmp/daily_briefing_data.json, and only removes it when explicitly run with --cleanup.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install daily-briefing - 安装完成后,直接呼叫该 Skill 的名称或使用
/daily-briefing触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.5
Version 1.0.5
- Added _meta.json file for skill metadata.
- No changes to core functionality or user-facing features.
v1.0.4
- Fixed a logic bug in the daily_briefing_orchestrator.sh script to ensure proper data gathering and JSON output.
- Updated README documentation for improved clarity and accuracy.
v1.0.3
No changes detected in this version.
- Version 1.0.3 has no file or documentation modifications.
- Behavior and requirements are unchanged from previous release.
v1.0.2
- Removed obsolete runner script and patch documentation.
- Updated documentation (SKILL.md) to match current implementation.
- No new features or visible behavior changes; this is a cleanup release.
v1.0.1
- Added documentation explaining LTSS exclusion logic.
- Updated SKILL.md with clarifications and refinements to skill behavior and integration documentation.
- No changes to end-user features or output contract.
v1.0.0
Initial release of daily-briefing.
- Generates a warm, concise daily briefing including weather, calendar, reminders, birthdays, and important emails.
- Designed for cron or chat delivery; always provides a briefing even with limited context.
- macOS system skill: gathers data via an orchestrator script; agent fetches weather via curl.
- Flexible section layout (weather, birthdays, events, reminders, important emails) based on available integrations.
- Output text only—no tool output, explanations, or formatting.
- Clear, gentle tone with Telegram-friendly spacing for easy reading.
元数据
常见问题
Daily Briefing 是什么?
Generates a warm, compact daily briefing with weather, calendar, reminders, birthdays, and important emails for cron or chat delivery. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 4625 次。
如何安装 Daily Briefing?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install daily-briefing」即可一键安装,无需额外配置。
Daily Briefing 是免费的吗?
是的,Daily Briefing 完全免费(开源免费),可自由下载、安装和使用。
Daily Briefing 支持哪些平台?
Daily Briefing 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Daily Briefing?
由 antgly(@antgly)开发并维护,当前版本 v1.0.5。
推荐 Skills