daily-gift

SUSPICIOUS. The stated purpose broadly matches creative generation, but the skill’s actual footprint is larger than a typical gift tool: autonomous cron execution, broad conversation/workspace access, local profile storage, and outbound calls to unspecified rendering/hosting services. The official OpenClaw/ClawHub install path lowers supply-chain concern, but this is still a third-party community skill whose data flows and API endpoints are not concrete enough to fully trust without code review.