Session Task Tracker

Task-based cross-session context management for OpenClaw agents. Maintains persistent task files so context survives session resets, compaction, and channel...

This skill appears to do what it says (maintain per-task markdown files), but it encourages storing configuration details, accounts, and absolute file paths in persistent files without any guidance on secret handling. Before installing: (1) Decide whether the workspace/tasks location is an appropriate place to persist sensitive data; avoid putting passwords, API keys, or private keys into task files. (2) If you will record credentials or config, require the skill to redact/avoid secrets or encrypt task files (or store sensitive data in a dedicated secret manager). (3) Restrict filesystem permissions on the workspace so other agents/users can't read task files. (4) Prefer that the skill prompt you before persisting any '关键信息' or absolute paths. (5) If you want tighter control, consider disabling autonomous invocation (if your platform supports it) or request the author add explicit safe-handling guidance (secret redaction, warnings, and an allowlist of paths). If you want, ask the skill author to add: (a) explicit prohibition on storing credentials, (b) optional encryption or secret-store integration, and (c) an explicit confirmation step before writing any 'accounts' or absolute paths.

Type: OpenClaw Skill Name: session-task-tracker Version: 1.0.1 The skill bundle provides a structured workflow for an AI agent to track tasks and maintain context across sessions by managing markdown files in a dedicated 'tasks/' directory. The instructions in SKILL.md and references/DESIGN.md are well-documented, focusing on organizational logic, task status transitions, and persistence without any evidence of data exfiltration, unauthorized execution, or malicious prompt injection.