Scribe

Autonomous session scribe — reads today's OpenClaw session logs, extracts decisions, preferences, framework sentences, and project updates, then writes a str...

What to check before installing: - Review the two included Python scripts (scripts/scribe.py and scripts/setup-cron.py) yourself — they are the code that will run. - If you enable automation, setup-cron will use your OpenClaw gateway token to register a nightly job that runs the scribe script; only run setup-cron if you trust the repository and the gateway token's scope. - The scribe script sends extracted conversation text to https://openrouter.ai (OpenRouter) using an API key read from env or ~/.openclaw/openclaw.json. If you have privacy concerns, run scribe.py manually first and/or set SCRIBE_MODEL/OPENROUTER_API_KEY to a provider you trust or leave it unset to avoid network calls. - Run the script manually (python3 scripts/scribe.py) on a small sample day to verify outputs and ensure it only reads the intended session directory and writes to a dedicated memory folder. - If you do not want automatic scheduling, skip setup-cron and instead use a system cron or manual runs that you control. - Backup or inspect memory/ and MEMORY.md after first runs to confirm no sensitive tokens or unexpected content are being written.

Type: OpenClaw Skill Name: openclaw-scribe Version: 1.0.1 The skill is classified as suspicious due to the use of prompt injection in `scripts/setup-cron.py` to instruct the OpenClaw agent to execute a local script. While this is for the skill's intended self-orchestration and not overtly malicious, it leverages a direct prompt injection vector (`payload.message`) which represents a significant vulnerability if the prompt were to be manipulated. Additionally, `scripts/scribe.py` uses `subprocess.run` with `curl` for external API calls, which, while seemingly handled safely in this instance, is a less robust and potentially risky method compared to dedicated HTTP libraries, contributing to the 'suspicious' classification as a risky capability.