Morning Briefing Generator

Generates a personalized morning briefing with weather, calendar events, urgent emails, trending topics, health data, news, and priorities to save time.

Before installing, get clarity from the publisher about exactly which credentials and files the skill will access and how they are stored. Specific checks: (1) Ask for a concrete list of required env variables (Telegram bot token, Google OAuth client/refresh tokens, Gmail OAuth, OpenWeatherMap key, Oura token, Asana/Todoist tokens, etc.). (2) Confirm whether the skill will read or write TOOLS.md, HEARTBEAT.md, or .env and what contents it will change — avoid storing secrets in plain .env files if possible. (3) Prefer OAuth flows that store refresh tokens securely and limit scopes to least privilege (read-only calendar and email filters). (4) For delivery channels (Telegram/WhatsApp/Slack), verify the destination is under your control and that messages do not leak other users' private data. (5) Test first with a throwaway account and minimal permissions. (6) If the publisher cannot provide a clear list of required credentials and a privacy design, treat the metadata omission as a red flag and avoid installing.

Type: OpenClaw Skill Name: morning-briefing-generator Version: 1.0.0 The skill instructs the AI agent to perform system-level actions, specifically to 'Create a cron job' for automation, as detailed in both `SKILL.md` and `README.md`. While presented as a feature for automated briefings, this capability grants persistence and could be a vector for privilege escalation or unauthorized execution if the agent's environment is not properly sandboxed or if the skill's underlying code were malicious. Additionally, the skill requires broad access to sensitive personal data (calendar, email, health metrics) and external services, handling API keys and OAuth tokens, which represents a high-privilege attack surface, even if justified by the stated purpose.