← 返回 Skills 市场
好运莲莲
作者
askdjoashdasd
· GitHub ↗
· v1.0.1
· MIT-0
80
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install private-assistant
功能描述
Personal bookkeeping, memo/journal, reminder, and spending-insight assistant for Hermes. Use when the user wants to record income or expenses, save notes or...
安全使用建议
What to check before installing:
- The skill runs Python scripts directly but the manifest lists no required binaries; confirm the host environment provides a trusted Python runtime and that SKILL_DIR path resolution is secure.
- The skill writes all data under HERMES_HOME/data/private-assistant/ and will create/modify JSON/JSONL files. If you need isolation or encryption for financial/memo data, plan accordingly.
- It schedules cron jobs via a platform 'cronjob' API and embeds a prompt and a 'skills' list in the payload. Verify how your Hermes platform enforces which skills a cron job can invoke and whether scheduled jobs can call external services or other skills — scheduled jobs run autonomously and can send messages on your behalf.
- The code does not show network calls or secret exfiltration in the visible parts, but confirm the remainder of the scripts (not fully shown in the truncated areas) do not perform HTTP requests, subprocess calls to external binaries, or read unrelated config files.
- If you accept this skill, review/approve any cron job payloads it attempts to create (which cron schedule, what skills are included, and the prompt text), and consider running it in a sandboxed profile or with a non-sensitive HERMES_HOME to verify behavior.
If you want higher assurance, ask the skill author to explicitly declare required binaries (python), document the scheduler dependency, and confirm the 'skills' field contents used for scheduled jobs.
功能分析
Type: OpenClaw Skill
Name: private-assistant
Version: 1.0.1
The private-assistant skill is a well-structured personal finance and memo manager that uses local JSONL files for data persistence. It utilizes the system's cronjob tool to implement reminders and scheduled spending insights, which is consistent with its stated purpose. The Python scripts (records.py, insights.py, reminders.py) include robust logic for file locking, input normalization, and natural language time parsing, showing no signs of malicious intent, data exfiltration, or obfuscation. The instructions in SKILL.md are focused on ensuring the AI agent handles data and scheduling reliably without attempting to bypass security boundaries.
能力评估
Purpose & Capability
Name/description match the code: local transactions, memos, reminders, and insights stored under HERMES_HOME/data/private-assistant. However the SKILL.md and manifest declare no required binaries while all runtime examples invoke 'python SKILL_DIR/scripts/...', so Python (or a Python runtime) is effectively required but not listed. The skill also expects a platform-provided 'cronjob' API/tool to schedule tasks; that dependency is assumed but not declared.
Instruction Scope
SKILL.md and the scripts stay within the described domain: reading/writing local JSONL files, generating insight digests, and producing cron payloads. The instructions intentionally route natural-language time parsing to reminders.py and schedule jobs via a 'cronjob' call. There is no instruction to read unrelated system files or to transmit data to external network endpoints in the visible code. The reminder prompt and cron payloads are intended to be self-contained, which matches the stated constraints.
Install Mechanism
No install specification (instruction-only) and included Python scripts are used directly. No third-party downloads or remote installs were found. This is lower risk than remote fetches, but it does mean the skill's code will run on the host without an install review step.
Credentials
The skill declares no required environment variables/credentials. The code does read HERMES_HOME (via env or optional hermes_constants.get_hermes_home) to locate its data directory — this is reasonable but is an undeclared runtime dependency rather than a secret. No API keys, network endpoints, or other credential requests are present in the visible code.
Persistence & Privilege
The skill creates and links cron jobs (scheduled tasks) and writes local JSON/JSONL files under HERMES_HOME. Scheduled jobs include a prompt and a 'skills' list in the payload; passing 'skills' into cron payloads can cause scheduled tasks to invoke other skills or perform autonomous actions later. While this behavior is expected for reminders/insights, it increases the blast radius because scheduled tasks run without the current conversational context and will execute autonomously. The skill is not marked 'always: true', which is good, but cron job creation is a meaningful persistent privilege and should be reviewed by the platform's scheduler/permissions model.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install private-assistant - 安装完成后，直接呼叫该 Skill 的名称或使用
/private-assistant触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added important clarifications to reminder workflows: do not pre-parse natural-language reminder times; always pass the raw user phrase to the script.
- Expanded and clarified scheduled task (cronjob) instructions, including session isolation, prompt context, and precise field requirements.
- Updated output workflow to emphasize that all time/date parsing and calculations are delegated to the scripts, not handled in-dialog.
- No code changes; documentation and usage best practices only.
v1.0.0
Initial release: Personal assistant for bookkeeping, memos, reminders, and spending insights.
- Record income, expenses, notes, and reflections with clear structured outputs.
- Set, view, and cancel explicit reminders, fully managed via cron and local storage.
- Query summaries, analyze spending patterns, and correlate memos with expenses.
- Manual and subscription-based weekly/monthly digest with low-interference notifications.
- All data stored per user profile for privacy and separation.
元数据
常见问题
好运莲莲 是什么？
Personal bookkeeping, memo/journal, reminder, and spending-insight assistant for Hermes. Use when the user wants to record income or expenses, save notes or... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 80 次。
如何安装 好运莲莲？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install private-assistant」即可一键安装，无需额外配置。
好运莲莲 是免费的吗？
是的，好运莲莲 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
好运莲莲 支持哪些平台？
好运莲莲 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 好运莲莲？
由 askdjoashdasd（@askdjoashdasd）开发并维护，当前版本 v1.0.1。
推荐 Skills