← 返回 Skills 市场
Smart Surprise
作者
TuringCorp.net
· GitHub ↗
· v1.1.0
· MIT-0
88
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install smart-surprise
功能描述
Proactively engages users with personalized casual messages at random intervals, learning preferences to deliver warm, varied conversations and check-ins.
安全使用建议
What to consider before installing: 1) This skill will create repeating, self-managed cron jobs that run the agent autonomously and send messages to the configured channel — verify you want the assistant to reach out without per-message consent. 2) It will read/write files in ~/.openclaw/workspace/skills/smart-surprise/ (config.json, topics.md, next_run.json) and will silently update topics.md after each run; if you prefer manual control, do not enable. 3) If you enable the calendar topic, the skill may read Google OAuth tokens from ~/.openclaw/secrets/google-calendar.json — only provide those tokens if you trust the skill. 4) Before activating, set conservative min/max intervals and quiet hours in config.json and test with an isolated channel or test account. 5) To stop the skill, remove its cron jobs (openclaw cron list / rm) and delete ~/.openclaw/workspace/skills/smart-surprise. 6) If you are unsure, inspect or back up topics.md and config.json and monitor cron jobs/logs for unexpected behavior. If you want lower risk, avoid granting calendar credentials and keep longer intervals or run manually rather than using the self-perpetuating cron chain.
功能分析
Type: OpenClaw Skill
Name: smart-surprise
Version: 1.1.0
The skill implements a 'proactive companion' using a self-perpetuating chain of one-shot cron jobs (via `openclaw cron add`) to ensure it runs indefinitely. It explicitly requests access to sensitive Google Calendar OAuth tokens and helper scripts (`~/.openclaw/secrets/google-calendar.json` and `~/.openclaw/scripts/google-calendar.py`) to provide calendar reminders. While these high-risk behaviors (persistence, credential access, and automated messaging) are documented as part of the skill's functionality in `SKILL.md` and `setup.md`, they represent a significant attack surface that could be easily repurposed for data exfiltration or unauthorized persistence.
能力标签
能力评估
Purpose & Capability
The skill's name and description match what the SKILL.md instructs: composing personalized messages, sending them via openclaw message send, and scheduling cron jobs. Required artifacts (config.json, topics.md, next_run.json) are consistent with a proactive messaging companion. No unrelated environment variables or binaries are requested.
Instruction Scope
Runtime instructions instruct the agent to read and write files under ~/.openclaw/workspace/skills/smart-surprise/, silently update topics.md on every run, and to create an indefinite chain of cron jobs that autonomously trigger the agent. Silent updates to user preference files and the permanent self-perpetuating cron chain are within the skill's purpose but are significant scope/surprise for non-technical users and could be used to persistently send messages or change local state without explicit per-run consent.
Install Mechanism
No install spec or remote downloads; this is an instruction-only skill with only local text files. That minimizes installer risk (no arbitrary code fetched at install time).
Credentials
The skill declares no required env vars or primary credential (good). It does, however, optionally read Google Calendar OAuth credentials from ~/.openclaw/secrets/google-calendar.json if the calendar topic is enabled — that is expected for calendar integration but involves sensitive tokens. The skill also assumes the OpenClaw messaging channels (Telegram/Discord/etc.) are already configured at the platform level so the agent can call openclaw message send; those platform credentials are not requested here but will be used by the cron-run agent.
Persistence & Privilege
Although always:false, the skill explicitly instructs creating a self-perpetuating sequence of cron jobs that run indefinitely and can autonomously send messages and modify topics.md. This grants ongoing autonomous presence and action on the host. Combined with silent updates and optional access to calendar credentials, this persistent capability is a notable privilege and user-risk vector.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install smart-surprise - 安装完成后，直接呼叫该 Skill 的名称或使用
/smart-surprise触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
**Smart Surprise v1.1.0 Changelog**
- Added explicit documentation for Google Calendar OAuth credential integration and secure handling in SKILL.md.
- Updated file structure and reference sections to reflect new credential requirements.
- Improved clarity in configuration and credential setup instructions.
- Minor documentation cleanups for accuracy and completeness.
- No functional code changes; updates focused on documentation and setup guidance.
v1.0.0
Initial release: proactive AI companion that sends personalized surprise messages via self-perpetuating cron chains
元数据
常见问题
Smart Surprise 是什么？
Proactively engages users with personalized casual messages at random intervals, learning preferences to deliver warm, varied conversations and check-ins. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 88 次。
如何安装 Smart Surprise？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install smart-surprise」即可一键安装，无需额外配置。
Smart Surprise 是免费的吗？
是的，Smart Surprise 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Smart Surprise 支持哪些平台？
Smart Surprise 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Smart Surprise？
由 TuringCorp.net（@turingcorp-net）开发并维护，当前版本 v1.1.0。
推荐 Skills