Todo Boss

Capture and track tasks with owner and due date, mark done, list open or delegated tasks, and get daily reports via Telegram commands.

This skill is incomplete and has some fragile and privacy-sensitive behavior. Before installing or using it, consider: (1) It only provides add_task.sh—commands mentioned in SKILL.md (listing, marking done, reports) are missing. Expect limited functionality unless you add more scripts. (2) The script looks for 'owner:' and 'due:' in English but the SKILL.md follow-up prompts are Korean, so extraction may fail; test inputs to confirm behavior. (3) The script writes the entire raw user text to a plain JSONL file in ~/.openclaw/workspace/data/todo — do not send secrets or private data through it. (4) The embedded Python heredoc interpolates shell variables without escaping; inputs containing quotes, backslashes, or newlines can break the script and corrupt the log. Consider fixing the script to safely escape or pass data to Python (e.g., use python -c with json.dumps of arguments or read from stdin), and implement missing features (list, done, report) before relying on it. If you cannot review/modify the script, run it in a controlled/test environment and avoid sending sensitive content.

Type: OpenClaw Skill Name: todo-boss Version: 0.1.0 The skill is highly suspicious due to a critical Remote Code Execution (RCE) vulnerability in `add_task.sh`. User-controlled input (TEXT, TITLE, OWNER, DUE) is directly interpolated into a Python here-document without proper sanitization, allowing an attacker to inject and execute arbitrary Python code. This flaw, while not explicitly malicious in its current form, provides a clear pathway for an attacker to achieve data exfiltration, persistence, or other harmful actions.