by 安全扫描
OpenClaw
可疑
high confidenceThe skill's description says it will collect session context and save summaries into an Obsidian vault, but the included instructions and script do not perform those actions and instead use hard-coded, fabricated data and paths — this mismatch is concerning.
评估建议
Do not assume this skill will actually save summaries to your Obsidian vault: the README says it will, but the included script only prints a summary made from hard-coded, fabricated session data and does not write files. The script also embeds a specific user path (/mnt/c/Users/milky/...), which is unexpected and should be configurable (not hard-coded). If you consider using this skill, ask the author to: 1) implement actual collection of real session context, 2) implement explicit, documented f...详细分析 ▾
⚠ 用途与能力
The skill claims to save session summaries to an Obsidian vault, but it declares no configurable vault path, no required config, and no credentials. The shipped script contains a hard-coded Windows/WSL vault path (/mnt/c/Users/milky/...) rather than using a declared config or asking the user — that is disproportionate and user-specific.
⚠ 指令范围
SKILL.md says the skill will 'collects session context' and 'saves to Obsidian 10_Daily folder'. The provided script does neither: it does not collect runtime session context, does not write files to disk, and instead prints a summary generated from hard-coded sessionData. The instructions and implementation contradict each other.
✓ 安装机制
There is no install spec and no network/downloads. The skill is instruction-only with a small local script; this is low-install risk.
⚠ 凭证需求
The skill requests no environment variables or credentials, which is good, but it embeds a user-specific absolute path for an Obsidian vault. That hard-coded path is a privacy concern and indicates the skill expects access to the user's filesystem without declaring it or providing configuration.
✓ 持久化与权限
The skill is not marked 'always' and does not request elevated or persistent platform privileges. It does not modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/17
- Initial release: generate structured session summaries triggered by keywords including "セッション終了", "サマリー", "今日の成果", "終わり" - Summaries include session duration, key decisions, progress, next actions, and modified files - Automatically saves each summary to the 10_Daily folder in your Obsidian vault
● 无害
安装命令 点击复制
官方npx clawhub@latest install session-summary
镜像加速npx clawhub@latest install session-summary --registry https://cn.clawhub-mirror.com
技能文档
Overview
Generates a structured summary of the current session and saves it to Obsidian.Usage
When the user says "セッション終了" or "今日の成果をまとめて", this skill:- Collects session context
- Generates a structured summary
- Saves to Obsidian 10_Daily folder
Output Format
# YYYY-MM-DD Session SummaryDuration
- Start: HH:MM
- End: HH:MM
- Total: X hours
Key Decisions
- Decision 1
- Decision 2
Progress
- [ ] Task 1
- [x] Task 2
Next Actions
- Action 1
- Action 2
Files Modified
- file1.md
- file2.js
Configuration
- Obsidian vault path: /mnt/c/Users/milky/Documents/OpenClaw-Obsidian/openclaw
- Daily notes folder: 10_Daily
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制