← 返回 Skills 市场
52
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install reminder-oc-cron-based
功能描述
Create, inspect, and cancel OpenClaw cron-based chat reminders. Use when the user asks for a reminder at a specific time or after a delay, wants to list pend...
安全使用建议
This skill appears to do what it says, but check these before installing or running the helper script:
- Ask the publisher to declare the environment variables the helper needs (OPENCLAW_BIN, OPENCLAW_REMINDER_TZ, OPENCLAW_REMINDER_CHANNEL, OPENCLAW_REMINDER_TO, OPENCLAW_REMINDER_ACCOUNT) in the registry metadata so you know what will be read.
- Verify the OPENCLAW_BIN value in your environment (and in any environment where the skill will run). If OPENCLAW_BIN can be set by an untrusted actor, an attacker could make the helper execute an arbitrary binary.
- Only run the helper script in trusted environments where the OpenClaw CLI is installed and you control environment variables. Prefer the native cron workflow recommended in SKILL.md if portability or stronger isolation is required.
- Review the exact openclaw commands the helper will run (listed in the script) and confirm your OpenClaw CLI’s behavior/permissions, since the script invokes add/list/remove operations.
- If you need stronger assurance, request the author to (a) declare required env vars in metadata, (b) avoid allowing OPENCLAW_BIN overrides or validate its path, and (c) document expected CLI outputs/versions.
Given these inconsistencies, proceed cautiously; the issues look like sloppy metadata/documentation rather than explicit malice, but they create a meaningful risk surface.
功能分析
Type: OpenClaw Skill
Name: reminder-oc-cron-based
Version: 0.1.0
The skill is a legitimate utility for managing chat reminders via OpenClaw's cron system. The helper script `scripts/reminder_cron.py` safely wraps the native CLI using `subprocess.run` with argument lists to prevent shell injection, and the instructions in `SKILL.md` are strictly aligned with the stated purpose without any signs of malicious prompt injection or data exfiltration.
能力评估
Purpose & Capability
The name/description (create/inspect/cancel OpenClaw cron reminders) aligns with the helper script and SKILL.md. However, the skill registry declares no required environment variables or credentials while the helper script expects several OPENCLAW_REMINDER_* env vars and an OPENCLAW_BIN override. Those env vars are material to the skill's operation but are not declared in metadata, which is an inconsistency.
Instruction Scope
SKILL.md instructs the agent to prefer native cron and uses the helper only as optional convenience. The helper script itself interacts only with the OpenClaw CLI (no unrelated files), lists and filters jobs, and creates/removes jobs. The problem is SKILL.md does not document the helper's dependency on specific environment variables (OPENCLAW_REMINDER_CHANNEL/TO/ACCOUNT, OPENCLAW_REMINDER_TZ) nor that OPENCLAW_BIN can be overridden — leaving room for unexpected behavior if those env vars are present or manipulated.
Install Mechanism
No install spec; this is instruction-plus-script only. That lowers supply-chain risk because nothing is downloaded or written during install. The helper is a local Python script that will run only if invoked.
Credentials
Registry metadata lists no required env vars, but the script reads OPENCLAW_BIN, OPENCLAW_REMINDER_TZ, and (for create) OPENCLAW_REMINDER_CHANNEL, OPENCLAW_REMINDER_TO, OPENCLAW_REMINDER_ACCOUNT. Those environment variables are necessary for operation in some modes and should have been declared. In particular, OPENCLAW_BIN defaults to "openclaw" but can be set to any path; if an attacker or misconfigured environment supplies a malicious binary path, invoking the helper could execute arbitrary commands. The number and naming of these env vars is disproportionate to what the registry claims.
Persistence & Privilege
always is false and the skill does not request persistent or system-wide modifications. The helper only calls the OpenClaw CLI and does not modify other skills or global configs itself.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install reminder-oc-cron-based - 安装完成后,直接呼叫该 Skill 的名称或使用
/reminder-oc-cron-based触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial public release
元数据
常见问题
Reminder OC Cron Based 是什么?
Create, inspect, and cancel OpenClaw cron-based chat reminders. Use when the user asks for a reminder at a specific time or after a delay, wants to list pend... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 52 次。
如何安装 Reminder OC Cron Based?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install reminder-oc-cron-based」即可一键安装,无需额外配置。
Reminder OC Cron Based 是免费的吗?
是的,Reminder OC Cron Based 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Reminder OC Cron Based 支持哪些平台?
Reminder OC Cron Based 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Reminder OC Cron Based?
由 AngHu666(@anghu666)开发并维护,当前版本 v0.1.0。
推荐 Skills