← 返回 Skills 市场

GOG Stale Game Cleanup

Name: GOG Stale Game Cleanup
Author: terrycarter1985

作者 terrycarter1985 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install gog-stale-game-cleanup

功能描述

Find installed GOG games not played in 30+ days, email a report, and add reminders to Apple Reminders Gaming list. Use when user wants to clean up unused GOG...

使用说明 (SKILL.md)

GOG Stale Game Cleanup

Automated workflow to identify installed GOG games that haven't been played recently, notify via email, and create Apple Reminders for each stale game.

Prerequisites

GOG library JSON file (see gog_library.json in config)
himalaya CLI configured for email sending
remindctl CLI for Apple Reminders (macOS)
python3 for JSON parsing

Workflow

Run scripts/stale_games.sh with required environment variables
Script identifies installed games with last_played older than 30 days (or never played)
Sends an email report to the configured address
Adds a "Consider uninstalling: \x3Cgame>" reminder to the Gaming list

Usage

GOG_LIBRARY=/path/to/gog_library.json \
[email protected] \
EMAIL_ACCOUNT=personal \
REMINDERS_LIST=Gaming \
bash scripts/stale_games.sh

Environment Variables

Variable	Required	Default	Description
`GOG_LIBRARY`	Yes	—	Path to GOG library JSON
`EMAIL_TO`	Yes	—	Recipient email address
`EMAIL_ACCOUNT`	No	`personal`	Himalaya account name
`REMINDERS_LIST`	No	`Gaming`	Apple Reminders list name
`STALE_DAYS`	No	`30`	Days threshold for stale
`DRY_RUN`	No	`false`	Preview without sending

Scheduling

To run weekly via cron:

# Add to crontab or use OpenClaw cron
0 10 * * 1 GOG_LIBRARY=... EMAIL_TO=... bash /path/to/scripts/stale_games.sh

Output

Email: Formatted report listing each stale game with last-played date and install path
Reminders: One reminder per stale game titled "Consider uninstalling: \x3Cgame name>" in the Gaming list
Console: Summary of findings and action confirmations

安全使用建议

Review before installing. Do not schedule it until the Python interpolation issue is fixed; run with DRY_RUN=true first, use only trusted values for GOG_LIBRARY and REMINDERS_LIST, and verify the email recipient, email account, and Reminders list.

功能分析

Type: OpenClaw Skill Name: gog-stale-game-cleanup Version: 1.0.0 The script `scripts/stale_games.sh` contains multiple code injection vulnerabilities where environment variables (`GOG_LIBRARY` and `REMINDERS_LIST`) are directly interpolated into Python strings within a `python3 -c` command. This allows for arbitrary Python code execution if these variables contain malicious payloads (e.g., single quotes followed by Python commands). While the tool's stated purpose of managing GOG games and sending reports via `himalaya` is plausible, the lack of input sanitization is a significant security flaw.

能力评估

ℹ Purpose & Capability

The SKILL.md and script are coherent: they find stale installed GOG games, email a report, and add Apple Reminders. Those actions are account-affecting, so users should notice them before running it.

ℹ Instruction Scope

Running the script with the default DRY_RUN=false sends an email and creates reminders immediately. This is disclosed, but it is not preview-first by default.

ℹ Install Mechanism

There is no install spec, and the registry requirements declare no required binaries or environment variables even though the skill text relies on python3, himalaya, remindctl, and runtime environment variables.

⚠ Credentials

GOG_LIBRARY and REMINDERS_LIST are shell-expanded directly into python3 -c source rather than passed safely as data, so crafted values could execute unintended Python code.

ℹ Persistence & Privilege

Optional cron/OpenClaw cron scheduling and local email/Reminders access are disclosed and purpose-aligned, but they can continue running until the user disables the schedule.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install gog-stale-game-cleanup
安装完成后，直接呼叫该 Skill 的名称或使用 /gog-stale-game-cleanup 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: stale game detection, email report, Apple Reminders integration

元数据

Slug gog-stale-game-cleanup

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题