Task ToDo

Manage tasks with persistent storage, supporting creation, retrieval, updates, deletion, filtering by status or priority, and status tracking via SQLite.

This skill appears internally consistent and implements a local SQLite-backed task manager. Before installing, consider: (1) The database file tasks.db will be created in the current working directory — avoid running it in directories containing sensitive files and check file permissions. (2) The skill has no network or credential access, so it does not exfiltrate data by design; nevertheless, avoid storing secrets in tasks. (3) If you allow autonomous agent invocation, the agent could create/read/update the local DB automatically — if that is a concern, run the skill manually or in an isolated environment. (4) If you want extra assurance, review or run the code in a sandbox (or a dedicated directory) and delete tasks.db when no longer needed.

Type: OpenClaw Skill Name: task-todo Version: 1.0.0 The OpenClaw AgentSkills bundle for 'task-todo' is classified as benign. The Python code (`database.py`, `task_skill.py`) correctly implements a local SQLite task management system using parameterized queries, effectively preventing SQL injection. The command-line interface parses arguments safely without shell injection risks. The `SKILL.md` and `README.md` files provide clear, descriptive instructions for using the skill and do not contain any adversarial prompt injection attempts or instructions for the AI agent to perform unauthorized actions. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The skill adheres strictly to its stated purpose of local task management.