← 返回 Skills 市场
invelene

Sentiet ORB

作者 Darlington Umeugo · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
690
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install daily-oracle
功能描述
A background agent that generates a daily life prediction by analyzing local data and social signals.
使用说明 (SKILL.md)

\r \r

Daily Oracle (Automated)\r

\r This skill is designed to run as a background process (Cron Job). It wakes up, analyzes the user's digital footprint, generates a prediction, pushes the notification, and then terminates.\r \r ⚠️ PRIVACY NOTICE: This skill processes highly sensitive personal data. All analysis must be performed within the local LLM context. No data is to be sent to third-party logging services.\r \r

Execution Routine\r

\r

1. Initialization & Anti-Ban Jitter\r

\r

  • Context: Since this task is triggered by a precise Cron timer (e.g., exactly 08:00:00), immediate execution creates a detectable bot pattern.\r
  • Action: Generate a random integer between 120 and 900 (seconds).\r
  • Wait: Sleep for that duration before making any network requests.\r
    sleep $(( RANDOM % 780 + 120 ))\r
    ```\r
    

\r

2. Silent Data Gathering\r

\r

A. Calendar Context\r

\r

  • Action: Read the local calendar for today's agenda (00:00 to 23:59).\r
  • Tool Usage: Use calendar-access or CLI equivalents (e.g., icalBuddy on macOS).\r
    • Prompt: "Summarize my calendar events for today from 00:00 to 23:59. Focus on constraints (meetings) and opportunities (free blocks)."\r \r

B. Social Context (Headless)\r

\r

  • Action: Open a headless browser session using existing cookies.\r
  • Target: Scan "Close Friends" or specific mutuals who appear in the user's recent calendar/messages.\r
  • Safety: Limit scrolling to max 5 posts/stories. Abort immediately if login is requested to prevent session flagging.\r
  • Data Extraction: Screenshot or scrape text from the first viewport of specific curated URLs (e.g., instagram.com/direct/inbox/).\r \r

C. Communications (iMessage/Local DB)\r

\r

  • Action: Read the last 50 messages from the local chat.db.\r
  • Query:\r
    SELECT\r
        text,\r
        datetime(date/1000000000 + 978307200, 'unixepoch', 'localtime') as date_sent\r
    FROM message\r
    WHERE date_sent > datetime('now', '-24 hours')\r
    ORDER BY date DESC\r
    LIMIT 50;\r
    ```\r
    
  • Filtering: Look for intent keywords: "tomorrow", "gym", "coffee", "meet", "lunch", "tonight".\r \r

D. System Signals\r

\r

  • Action: Check ~/Downloads for recent files.\r
    find ~/Downloads -type f -mtime -1 -print\r
    ```\r
    
  • Inference: Determine active deliverables or recent interests based on file types (e.g., PDFs vs. Images).\r \r

3. The Oracle's Inference\r

\r

  • Synthesize: Combine the hard data (Calendar: "Gym at 5pm") with soft data (Social: "Amy posted about coffee").\r
  • Predict: Formulate a single, high-confidence sentence in the future tense.\r
  • Tone: Insightful but grounded. Example: "You will meet Amy at the gym today, and she will likely suggest getting coffee after workout because she posted about craving caffeine"\r \r

4. Push Notification (Critical)\r

\r

  • Context: The user is likely not looking at the terminal or chat window.\r
  • Action: Use the system's primary notification tool.\r
    • macOS: osascript -e 'display notification "Your prediction..." with title "Daily Oracle"'\r
    • Linux: notify-send "Daily Oracle" "Your prediction..."\r
  • Format:\r

    🔮 Daily Oracle: [Your Prediction Here]\r \r

Constraints & Safety\r

\r

  1. One-Shot Execution: This process must run from start to finish without pausing for user input.\r
  2. Failure Mode: If data is insufficient to make a specific prediction, fall back to a generic personalized wellness tip based on the weather. Do NOT fail silently.\r
  3. Data Hygiene: Clearly wipe the temporary context/memory of the gathered data once the prediction is sent.\r
  4. Silence on Sources: The output message must strictly contain the prediction and subtle reason for prediction. Do not list the data sources in the notification.\r
安全使用建议
This skill will read very sensitive local data (messages, calendar, downloads) and use your browser cookies to scrape social sites to make predictions. Before installing or scheduling it daily: (1) ask the publisher for source code or a provenance link you can audit (the registry metadata lacked declared permissions); (2) do not grant Full Disk Access or cookie-reading privileges to the agent unless you fully trust and have audited the skill; (3) prefer manual invocation rather than a cron job so you control when it runs; (4) run it in an isolated account or sandbox if you want to test; (5) confirm there are no network exfiltration endpoints and that notifications do not leak source data; and (6) if you cannot audit the actual runtime behavior, treat this as high-risk and avoid granting persistent privileges.
功能分析
Type: OpenClaw Skill Name: daily-oracle Version: 1.0.0 The skill is classified as suspicious due to its extensive access to highly sensitive personal data and its capability to execute arbitrary shell commands. It explicitly requests permissions to read iMessage `chat.db`, Instagram Direct Messages (via browser cookies), calendar events, and recent files in `~/Downloads`. The `SKILL.md` instructs the agent to execute shell commands like `sleep`, `find`, and `osascript`/`notify-send`. While the skill declares a 'local-only' safety policy and lacks explicit evidence of data exfiltration or other malicious intent, the broad permissions and recurring execution via a cron job (as detailed in `README.md`) present a significant privacy risk and a powerful primitive that could be misused through prompt injection or other vulnerabilities.
能力评估
Purpose & Capability
The skill's purpose (personalized daily predictions) legitimately requires reading local calendar, messages, and some social context, which the SKILL.md explicitly instructs. However, the manifest/registry metadata provided to the platform declares no required env vars, config paths, or binaries while SKILL.md lists substantial permissions (calendar-access, sqlite-access, browser cookies, filesystem). That mismatch between declared platform requirements and the runtime instructions is a red flag: the platform-level declaration understates the sensitive access the skill expects.
Instruction Scope
The SKILL.md instructs the agent to read ~/Library/Messages/chat.db, query the local calendar, inspect ~/Downloads, and launch a headless browser using existing cookies to scrape Instagram/Twitter. Those actions are coherent with generating a personal prediction but are highly privacy-invasive. The 'anti-ban jitter' and headless scraping workflow indicate automated access to third-party sites using stored session cookies — acceptable technically but sensitive, and the instructions demand silent, one-shot execution with no user interaction and explicit hiding of sources in the notification.
Install Mechanism
No install spec or external downloads are present (instruction-only skill). This minimizes code-install risk because nothing is written by an installer, but also means all runtime actions depend on the agent environment and granted OS permissions.
Credentials
Although the registry lists no required credentials or config paths, the README and SKILL.md require Full Disk Access, calendar access, read access to chat.db, and the ability to read browser cookies for social sites. These are high-privilege accesses for a convenience/fun feature. The permissions requested are disproportionate unless the user explicitly consents and understands the implications. The skill does not request API keys or external secrets, but local credential-like artifacts (browser cookies, message DB) are treated as required inputs.
Persistence & Privilege
The skill is designed to be scheduled as a Cron job (persistence via user-managed scheduling), not forced always-on by the platform. It therefore has an ongoing presence only if the user sets a cron job or similar. Still, granting the agent persistent OS-level permissions (Full Disk Access, cookie access) effectively raises its long-term privilege; the SKILL.md's one-shot/no-interaction requirement increases risk if run unattended.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install daily-oracle
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /daily-oracle 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Added background agent that generates daily life predictions using local calendar, messaging, file, and social data. - Introduced random execution delay ("anti-ban jitter") to avoid detectable timing patterns. - Implements privacy measures: all data processing is performed locally with no external data transmission. - Provides OS-level notifications with concise, actionable predictions based on synthesized data. - Includes safety fallbacks and clear data hygiene routines to ensure privacy and reliability.
元数据
Slug daily-oracle
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Sentiet ORB 是什么?

A background agent that generates a daily life prediction by analyzing local data and social signals. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 690 次。

如何安装 Sentiet ORB?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install daily-oracle」即可一键安装,无需额外配置。

Sentiet ORB 是免费的吗?

是的,Sentiet ORB 完全免费(开源免费),可自由下载、安装和使用。

Sentiet ORB 支持哪些平台?

Sentiet ORB 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Sentiet ORB?

由 Darlington Umeugo(@invelene)开发并维护,当前版本 v1.0.0。

💬 留言讨论