Timeline

Log dated events and facts to a queryable personal timeline. Use when the user wants to record something that happened (medical events, family moments, miles...

This skill appears to do what it says: it creates and edits a local Timeline.md in a vault folder. Before installing, review and consider: (1) the script uses VAULT_PATH but the skill doesn't declare it — set VAULT_PATH explicitly to a directory you control so it doesn't default to /Users/andrew/Documents/Vault v3; (2) the script will create and write Timeline.md in that folder, so avoid pointing it at any sensitive system directory or shared repo; (3) there is no network activity in the code, but you should still inspect the script yourself or run it in a safe environment to confirm; (4) back up any existing Timeline.md before first run; and (5) if you plan to enable autonomous agent invocation, be mindful that the skill can create or modify local files (store private health/family info) — limit access accordingly.

Type: OpenClaw Skill Name: timeline Version: 1.0.0 The skill contains shell injection vulnerabilities in `scripts/timeline.sh` due to the use of unsanitized user input in `sed` and `grep` commands. While the logic aligns with the stated purpose of logging events to a Markdown file, the lack of input validation could allow for arbitrary file manipulation or command execution. No evidence of intentional malice, data exfiltration, or obfuscation was found.