← 返回 Skills 市场

daily-report-bian

Name: daily-report-bian
Author: databian

作者 databian · GitHub ↗ · v1.0.2 · MIT-0

cross-platform ⚠ suspicious

261

总下载

当前安装

版本数

在 OpenClaw 中安装

/install daily-report-bian

功能描述

自动生成并在指定时间通过飞书推送每日研究进展报告，内容涵盖今日进展、延续项目、明日计划及系统状态，字数不超1000字。

使用说明 (SKILL.md)

Daily Report Skill - 每日研究进展推送

功能说明

自动生成每日研究进展报告，并在指定时间推送给用户。报告总字数控制在 1000 字以内。

数据源

当天会话记录 - 从飞书会话 JSONL 文件读取
最近 7 天记忆文件 - 读取 memory/YYYY-MM-DD.md

核心逻辑

1. 项目识别

从当天会话中提取完成的任务/项目
从最近 7 天记忆文件中识别延续性项目
保持项目命名前后一致

2. 报告生成

按模板填充内容
总字数 ≤1000 字
结构清晰，分条罗列

3. 记忆更新

报告生成后追加到当天记忆文件
避免重复记录

4. 推送配置

默认推送时间：22:00
推送渠道：飞书私聊
支持用户自定义时间

文件结构

daily-report/
├── SKILL.md          # 本文件
├── generate.js       # 报告生成核心逻辑
├── config.json       # 配置（推送时间、数据源天数等）
└── template.md       # 报告模板

报告结构

今日进展 - 从会话记录和记忆文件提取
延续性项目 - 持续进行中的项目列表
明日计划 - 基于今日进展推导
系统状态 - 上下文占用等
月度工作热力图 - GitHub 风格，展示最近 30 天工作量

使用方法

手动生成

node /root/.openclaw/workspace/skills/daily-report/generate.js

Cron 定时任务（已配置）

# 查看任务
openclaw cron list

# 修改推送时间（如改为 21:00）
openclaw cron edit \x3Cjob-id> --cron "0 21 * * *"

# 手动测试
openclaw cron run \x3Cjob-id>

默认配置

推送时间: 22:00 (Asia/Shanghai)
推送渠道: 飞书私聊
字数限制: ≤1000 字
数据源: 当天会话 + 最近 7 天记忆文件

热力图说明

⬜ 白色 - 无工作
🟨 黄色 - 少量工作（\x3C500 字）
🟩 绿色 - 中等工作（500-2000 字）
🟥 红色 - 大量工作（>2000 字）

注意事项

首次运行需确保 memory/ 目录存在
推送前检查上下文占用，避免超限
延续性项目名需保持一致，便于追踪

安全使用建议

Before installing, review the remainder of generate.js (the truncated portion) to confirm how messages are sent to Feishu and where credentials come from. Specifically: 1) Verify there are no hardcoded tokens or remote upload endpoints; 2) Confirm whether the script uses platform-integrated push APIs (and that those are acceptable) or directly calls Feishu APIs (in which case it should require and document an API token); 3) Inspect any execSync usages to see what shell commands are run; 4) Consider the privacy implications of the skill reading /root/.openclaw/agents/.../sessions and the memory directory — these contain conversation history and may include sensitive content; 5) If you proceed, run the skill in a restricted environment or with read-only copies of the session/memory data until you verify its network behavior. If you can provide the full, untruncated generate.js (or point to the push/dispatch functions), I can give a higher-confidence assessment.

功能分析

Type: OpenClaw Skill Name: daily-report-bian Version: 1.0.2 The skill generates daily research reports by accessing sensitive session history and memory files within the OpenClaw environment (e.g., `/root/.openclaw/agents/main/sessions/sessions.json`). It also executes system commands via `execSync` (`openclaw status`) and performs broad file read/write operations to update memory logs. While these capabilities are plausibly needed for the stated purpose of summarizing user activity, the direct access to private conversation logs and the use of shell execution constitute high-risk behaviors that warrant a suspicious classification under the provided criteria.

能力评估

ℹ Purpose & Capability

Name/description claim to generate and push daily reports; the code reads session JSONL and recent memory files and writes an appended report — this aligns with the stated purpose. However the skill reads agent session storage (/root/.openclaw/agents/main/sessions) and workspace memory (/root/.openclaw/workspace/memory), which are broader OS paths than a purely 'report formatting' task and may contain unrelated or sensitive conversations. That access is plausible for this feature but worth noting.

⚠ Instruction Scope

SKILL.md explicitly directs reading today's session JSONL and recent memory files and appending the generated report to memory files — these steps are within a report generator's scope. But the instructions promise pushing to Feishu without explaining how authentication is obtained. The code references platform-specific paths and includes child_process.execSync (imported at top), which gives the script the ability to run arbitrary shell commands at runtime; the SKILL.md does not document what external commands will be invoked. The combination of file reads, file writes, and possible shell execution increases risk if not audited.

✓ Install Mechanism

The skill is instruction-only with no install spec; generate.js and supporting files are included in the skill bundle. No network downloads or package installs are performed during install, which minimizes install-time risk.

⚠ Credentials

The skill claims to push messages via Feishu but declares no required environment variables or credentials. There's no visible Feishu app ID/secret or token in the manifest. This is inconsistent: pushing to an external service normally requires credentials. Possible explanations: (a) it relies on platform-provided push infrastructure/credentials (not declared), (b) the remainder of generate.js (truncated in the review) contains credential handling or network calls, or (c) it executes external CLI commands to send messages (execSync). Because credentials and network-send behavior are not documented, it's unclear whether the skill will attempt to access or transmit sensitive agent session data externally, which is a privacy concern.

✓ Persistence & Privilege

The skill does not request always:true and has no install hooks modifying other skills or system-wide settings. Autonomous invocation is allowed (platform default). It writes to its own memory files (appending generated reports), which is expected. Note: autonomously reading agent sessions + sending externally (if it does) would increase blast radius, so autonomy combined with the other concerns is important to consider.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install daily-report-bian
安装完成后，直接呼叫该 Skill 的名称或使用 /daily-report-bian 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.2

- Clarified and expanded the feature description, core logic, and file structure in SKILL.md. - Detailed project extraction, report generation, memory update, and push notification configuration. - Added explanations on report sections and included usage instructions for manual and scheduled runs. - Provided specifics on the heatmap visualization and its color meanings. - Listed precautions and best practices for accurate report generation.

元数据

Slug daily-report-bian

版本 1.0.2

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题