by 下载技能包
最后更新
2026/3/24
安全扫描
OpenClaw
可疑
medium confidenceThe skill's README-like instructions describe multi-channel reminders and concrete CLI commands, but the package contains no code, no install steps, and requests no credentials needed for email/push—this mismatch could lead the agent to run or rely on unknown local scripts or missing external services.
评估建议
This skill is instruction-only: it tells the agent to run a local Python script (scripts/reminder.py) and to store reminders in ~/.openclaw/reminders.json, but the skill bundle includes no code or any credentials for sending email/push messages. Before installing or invoking it, verify whether you already have the referenced scripts/tools on your system and inspect them (scripts/reminder.py) — do not run unknown scripts. Ask the publisher how email/push notifications are implemented and where cr...详细分析 ▾
⚠ 用途与能力
The description promises multi-channel notifications (push, email, message) and scheduling features, but the skill declares no environment variables, credentials, or integration details needed to send emails or push messages. That capability does not match the declared requirements.
⚠ 指令范围
SKILL.md instructs running python3 scripts/reminder.py with add/list/delete/complete subcommands and states reminders persist to ~/.openclaw/reminders.json. The skill bundle contains no scripts or code—so these instructions would cause the agent to attempt to run local, user-side commands or assume external tooling exists. That creates ambiguity and potential for unexpected local command execution.
✓ 安装机制
No install specification and no code files are included (instruction-only). This minimizes supply-chain install risk, but also means the skill expects external/local tools to provide functionality.
⚠ 凭证需求
No env vars or credentials are requested even though the skill claims multi-channel delivery (email/push/messages) which normally requires API keys, SMTP credentials, or push-service tokens. The absence of declared credentials is disproportionate to the advertised features.
ℹ 持久化与权限
The skill states it persists reminders to ~/.openclaw/reminders.json. Persisting data in the user's home directory is expected for a reminder tool, but it is persistent storage that will survive restarts and may contain personal data—users should be aware of where data is stored.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
- Initial release of jpeng-reminder skill. - Set one-time or recurring reminders using natural language. - Manage tasks with listing, completion, and deletion features. - Supports multi-channel notifications (push, email, message). - Reminders are persistently stored and survive restarts.
● 无害
安装命令
点击复制官方npx clawhub@latest install jpeng-reminder
镜像加速npx clawhub@latest install jpeng-reminder --registry https://cn.longxiaskill.com