Reagent Expiry Alert

Scan reagent barcodes or IDs, log expiration dates, and generate multi-level alerts before reagent expiry to support laboratory inventory management.

This skill is not obviously malicious, but there are clear mismatches and a small bug risk you should consider before using it on real inventory: - Implementation vs documentation: The SKILL.md promises multi-level alerts (e.g., 30/60/90 days), distinct warning/critical levels, and reorder recommendations; the included script only implements a simple local JSON inventory and a single alert threshold (alert-days). Reorder recommendations are not produced. Expect fewer features than the docs claim. - Bug / validation risk: The script does not validate expiry dates when scanning — it stores the string as provided. Later, check_alerts uses datetime.fromisoformat and could error if an unexpected format is stored. Also, the code treats items with <=7 days as 'expired' (adds them to the expired list), which is likely a logic bug compared with the intended behavior described in the docs. - Data storage and privacy: Inventory is saved unencrypted at ~/.openclaw/reagent_inventory.json. That file could contain sensitive lab inventory data. Review, secure, and back up that file; consider file permissions or encryption if needed. - Testing recommendation: Run python -m py_compile scripts/main.py and exercise the script in a safe environment (use throwaway inventory and a test home directory) to confirm behavior. Inspect and/or patch the script to implement proper date validation on scan, correct the alert thresholds, and add any missing features (warning levels, reorder logic) before trusting it with production data. - If you need the promised features or stronger guarantees, request a revised version from the author (author info is missing) or modify the script yourself. Avoid using this tool for controlled substances or regulated items (SKILL.md already advises against that).

Type: OpenClaw Skill Name: reagent-expiry-alert Version: 1.0.0 The reagent-expiry-alert skill is a legitimate utility for laboratory inventory management. The Python script (scripts/main.py) manages a local JSON database in the user's home directory to track expiration dates, and the SKILL.md instructions provide clear, safe operational boundaries. There is no evidence of data exfiltration, shell execution, or malicious prompt injection.