安全扫描
OpenClaw
可疑
medium confidenceThe instructions match a session wrap-up purpose, but the skill lacks safeguards (ambiguous workspace, automatic git push, and model-invocable behavior) that could cause unwanted commits or data exfiltration.
评估建议
This skill does what it says (log session notes, update PARA, commit), but it has operational risks you should address before installing. Specific recommendations: (1) Require an explicit workspace path or confirm the repo to operate on; (2) Do not perform automatic git push—change to require a user confirmation before pushing, or make pushes manual; (3) Ensure the agent will not commit secrets or sensitive files (add a clear exclude list or .gitignore guidance); (4) Consider setting disableMode...详细分析 ▾
✓ 用途与能力
Name and description align with the instructions: writing session notes, updating long-term memory and PARA notes, and committing changes is coherent for a 'session wrap-up' skill. There are no unrelated environment variables or binaries requested.
⚠ 指令范围
The SKILL.md instructs the agent to write and update files across workspace paths (memory/, notes/, MEMORY.md) and to run git commands. It requires creating and modifying files and then pushing them to the remote. The doc does not define the <workspace> path, does not require confirmation before pushing, and provides no guidance to avoid committing sensitive data.
✓ 安装机制
Instruction-only skill with no install steps or downloaded code. This is low-risk from an installation/execution standpoint.
ℹ 凭证需求
No credentials or environment variables are declared (which is reasonable), but the use of git push implicitly relies on existing git credentials/configuration in the environment. Because the skill will push automatically, it can cause remote writes using whatever credentials are present—this is a proportionality concern even though credentials aren't explicitly requested.
⚠ 持久化与权限
Flags show default behavior: the skill is model-invocable (disableModelInvocation not set) and not always-enabled. That means the model could autonomously invoke this skill and trigger automatic commits/pushes without an explicit user confirmation, increasing risk.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/7
Initial release
● 可疑
安装命令 点击复制
官方npx clawhub@latest install session-wrap-up
镜像加速npx clawhub@latest install session-wrap-up --registry https://cn.clawhub-mirror.com
技能文档
End-of-session protocol to preserve context and ensure continuity between sessions.
When Triggered
Run this protocol when the user indicates they want to wrap up the current session before starting a new one.
Protocol Steps
Execute these steps in order:
1. Flush to Daily Log
Write to memory/YYYY-MM-DD.md (create if doesn't exist):
- Key topics discussed in this session
- Decisions made
- Commands, configs, or code that worked
- Problems solved and how they were solved
- Any gotchas or lessons learned
2. Update Long-Term Memory
If significant learnings occurred, update MEMORY.md:
- New user preferences discovered
- Important lessons learned
- Long-term decisions made
- Workflow changes
3. Update PARA Notes
Check and update the PARA structure in notes/ (or memory/notes/):
- Open loops (
notes/areas/open-loops.md): Add new unfinished items, mark completed items with ✅ - Projects (
notes/projects/): Update progress on active projects - Areas (
notes/areas/): Add new ongoing responsibilities - Resources (
notes/resources/): Add new reference material, how-tos
4. Commit Changes
cd
git add -A
git status
git commit -m "wrap-up: YYYY-MM-DD session summary"
git push
Notes:
- The wrap-up
git pushis automatic (no confirmation prompt). - If
git pushfails, report the error and leave the commit locally.
5. Report Summary
Provide a brief summary to the user:
- What was captured
- Files updated
- Any items that need follow-up next session
- Confirmation that changes were committed (and pushed, if successful)
Example Output
## Session Wrap-Up Complete ✅Captured to daily log:
- Configured PARA second brain
- Fixed vector indexing for notes
- Set up weekly memory review cron
Updated:
- MEMORY.md: Added memory system learnings
- notes/areas/open-loops.md: Marked .gitignore task complete
Committed: wrap-up: 2026-01-30 session summary
Follow-up next session:
- Check LanceDB autoCapture setting
- Consider morning briefing cron
Ready for new session! ⚡
Notes
- Always create the daily log file if it doesn't exist
- Use the current date for filenames and commit messages
- Keep summaries concise but complete
- Include the ⚡ emoji at the end (GigaBot signature)
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制