← 返回 Skills 市场
66
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install weekly-checker
功能描述
OpenClaw 每周例行检查 - 检查系统状态、安全风险、技能库健康,生成检查报告
安全使用建议
Do not install or enable this skill until you verify a few things: (1) Ask the publisher for the implementation (tools/weekly_checker.py and any other scripts) and review that code — the SKILL.md references that script but it is not bundled. (2) Confirm how 飞书 notifications are configured (webhook or token) and never provide credentials without reviewing how they are used; the skill metadata declares no env vars for notifications. (3) Decide which filesystem paths the skill is allowed to read (logs, skills/, reports/) and restrict access or run the skill in a sandbox. (4) If you plan to enable automatic scheduling, require an explicit installation step that you can inspect (cron/task creation). (5) If you cannot get the source code or clear configuration for notifications and scheduling, treat this skill as untrusted and avoid granting it system-level access.
功能分析
Type: OpenClaw Skill
Name: weekly-checker
Version: 1.0.0
The skill bundle describes a system auditing tool that performs high-risk activities, including scanning for plaintext keys, checking sensitive file permissions, and sending data to an external endpoint (Feishu/Lark). While these actions are consistent with the stated purpose of a 'weekly security check' in SKILL.md, the combination of credential hunting and automated reporting to external webhooks constitutes a significant security risk, especially as the primary execution logic in 'tools/weekly_checker.py' is not provided for verification.
能力评估
Purpose & Capability
The name/description match the SKILL.md content: periodic checks of the gateway, skills library, Windows system, and security. However the skill references running a local script (tools/weekly_checker.py), reading skills/ and reports/ paths, and sending 飞书 notifications while the package declares no files, no required binaries, and no credentials. That gap means the implementation the SKILL.md expects is missing from the bundle.
Instruction Scope
SKILL.md instructs the agent to read system state, scan logs, check permissions, inspect the skills library, and notify via 飞书. These are broad file/system access operations and outbound notifications. The instructions also reference executing a local Python tool (python tools/weekly_checker.py) that is not included. The instructions grant broad discretion (automatic scheduling, scanning many paths) without specifying safe boundaries or required approvals.
Install Mechanism
No install spec and no code files are included — this minimizes the risk of the skill dropping code onto disk. However, the SKILL.md expects a tools/weekly_checker.py and scheduled task behavior that are not present; the lack of an install mechanism means those actions would rely on pre-existing host-side artifacts or external setup.
Credentials
The instructions require sending 飞书 (Feishu) notifications but the skill declares no environment variables, webhooks, or credentials. It also says it will inspect skill repository files and system logs but declares no config paths or permissions. The absence of declared credentials/paths is inconsistent with the actions described and could hide required secrets or setup steps.
Persistence & Privilege
The skill is not marked always:true and is user-invocable; autonomous invocation is allowed (disable-model-invocation:false). SKILL.md mentions automatic weekly execution and scheduling, but no mechanism to install or enable a scheduler is provided. This is not itself malicious but is a missing detail the user should verify.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install weekly-checker - 安装完成后,直接呼叫该 Skill 的名称或使用
/weekly-checker触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of weekly-checker.
- Automates weekly system checks for OpenClaw, including gateway, skills, security, and Windows system health.
- Generates detailed JSON reports and Feishu notifications for issues found.
- Separates issue severity: immediate alerts for critical problems and summary notifications for warnings.
- Supports both scheduled (Monday 09:00) and manual triggering.
- Outlines clear notification and issue handling procedures.
元数据
常见问题
Weekly Checker 是什么?
OpenClaw 每周例行检查 - 检查系统状态、安全风险、技能库健康,生成检查报告. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 66 次。
如何安装 Weekly Checker?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install weekly-checker」即可一键安装,无需额外配置。
Weekly Checker 是免费的吗?
是的,Weekly Checker 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Weekly Checker 支持哪些平台?
Weekly Checker 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Weekly Checker?
由 JIRBOY(@jirboy)开发并维护,当前版本 v1.0.0。
推荐 Skills