Tasktrove

Manage todos via Tasktrove API. Use for listing, creating, completing, or updating tasks. Triggers on task/todo requests like "what's on my todo list", "add a task", "mark X done", "what's due today".

This skill appears to implement a legitimate Tasktrove client, but the registry metadata does not declare environment variables that the skill actually requires. Before installing or using it: 1) Confirm the skill's origin — source/homepage are missing. 2) Expect to set TASKTROVE_HOST (required) and optionally TASKTROVE_TOKEN; the script will send your token and requests to whatever host you configure, so only point it at a trusted Tasktrove instance. 3) Review the included scripts/tasks.py yourself (it's short and readable) to verify there are no surprises. 4) Ask the publisher to correct the metadata so required env vars/primary credential are declared. If you cannot verify the source, treat the skill as higher risk and avoid supplying real credentials.

Type: OpenClaw Skill Name: tasktrove Version: 1.0.0 The skill bundle is designed to manage tasks via a user-configured Tasktrove API. The `SKILL.md` provides clear instructions without any prompt injection attempts against the agent. The `scripts/tasks.py` uses standard Python libraries (`urllib.request`) to interact with the API, reading `TASKTROVE_HOST` and `TASKTROVE_TOKEN` from environment variables. There is no evidence of intentional malicious behavior such as data exfiltration (beyond task data to the configured API), unauthorized command execution, persistence, or obfuscation. The network access is directly aligned with the skill's stated purpose.