Today Task

通用任务结果推送器，当任务完成后将结果推送到负一屏。使用统一的标准数据格式，支持各种类型的任务结果推送。

What to check before installing/using: 1) Confirm the pushServiceUrl — default points at a Huawei hiboards endpoint; change to a destination you trust if necessary. 2) Do not paste your authCode into chat; use the openclaw config command as recommended. 3) Avoid including highly sensitive personal data in task_content because the skill will transmit task_content and metadata to the configured endpoint. 4) If you are concerned about local storage, set save_records=false and/or periodically clean logs/ push_records. 5) Review the bundled Python scripts (they are included) and install dependencies (requests) in an isolated environment. 6) Update-checking will contact ClawHub only when enabled — you can disable it if you want to avoid external network calls. Overall the package appears coherent with its stated purpose; the main risks are data-exfiltration to the configured endpoint (intentional and documented) and local storage of pushed content.

Type: OpenClaw Skill Name: today-task Version: 1.0.17 The 'today-task' skill is a legitimate utility designed to push task results to Huawei's 'Negative Screen' (HiBoard) service. It follows a transparent data model, explicitly documenting that sensitive information like the 'authCode' and task content are sent to a specific Huawei Cloud endpoint (hiboard-claw-drcn.ai.dbankcloud.cn). The code includes robust error handling, local logging with data masking (e.g., in logger.py), and a version update checker that utilizes the platform's 'clawhub' CLI. No evidence of malicious intent, unauthorized data exfiltration, or harmful prompt injection was found; the skill's behavior is entirely consistent with its stated purpose.