Manage family todo lists with multi-user support

What to check before installing: - Open SKILL.md in a plain-text editor or hex viewer and remove/inspect any strange or invisible characters (the pre-scan flagged unicode-control-chars). - Inspect todo.js yourself (it's included). Confirm it only reads/writes memory/todo.json and does not call external network endpoints or execute other programs. The provided file appears local-only and safe on that basis. - Note the metadata/README mismatch: SKILL.md mentions TELEGRAM IDs but the script does not connect to Telegram; clarify with the author if you expected messaging integration. Also SKILL.md uses 'Shared' while the code checks for 'Family' — fix the labels to avoid surprises. - The script optionally reads TODO_ADMIN_ID, TODO_PARTNER_ID, TODO_GROUP_ID env vars but these were not declared in the registry metadata. These are likely benign (user IDs), but treat them as configuration, not secrets. - Run the script in an isolated environment (or with a backup) the first time to confirm it creates only memory/todo.json and behaves as expected. If you plan to put the todo file in a shared location, ensure file permissions are set appropriately. - If you are unsure about the hidden-character finding or the metadata discrepancies, contact the publisher for clarification or avoid installing until resolved.

Type: OpenClaw Skill Name: family-todo-management Version: 1.0.0 The skill bundle implements a simple Node.js todo list manager using file-based JSON storage. The `SKILL.md` provides clear, benign instructions for the AI agent and user. The `todo.js` script performs expected file system operations (`fs.read/write`) to manage `memory/todo.json` and reads specific environment variables for configuration (`process.env.TODO_ADMIN_ID`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.