Task Watcher Skill

Monitor async tasks by polling their state and send Discord/Telegram notifications on changes or completion for workflows like CI/CD, deployments, or reviews.

This skill appears coherent and self-contained, but before installing: 1) Confirm who can create/modify tasks.jsonl in ~/.openclaw/shared-context — a task entry can point the adapter at arbitrary packet paths and cause the watcher to read those files. Limit write access to that directory to trusted agents/users. 2) Ensure OpenClaw agent (and its delivery credentials) is configured securely; this skill delegates delivery to the agent and does not itself hold provider secrets. 3) If you rely on Discord delivery, test with dry_run=true first to verify messages and file paths. 4) If you run the watcher via cron, inspect the cron job, log rotation, and file permissions so sensitive data in audit/notification files isn't exposed. 5) Note Telegram notifier is a placeholder; production Telegram delivery is not implemented in this package.

Type: OpenClaw Skill Name: task-watcher Version: 1.2.1 The task-watcher skill bundle is a well-structured asynchronous monitoring system designed to track task states (like content reviews or CI/CD jobs) and send notifications. The code follows a clean, modular architecture using the Python standard library, with clear separation between data persistence (JsonlTaskStore), state checking (Adapters), and notification delivery (Notifiers). While it utilizes subprocess.run in notifiers.py to trigger Discord alerts via the OpenClaw CLI, it does so using safe argument lists and for the explicitly stated purpose of the skill. No evidence of malicious intent, data exfiltration, or prompt injection was found.