待办大师

用于本地待办管理的技能，支持基于 Python CLI 和 SQLite 存储待办；首次必须由用户确认数据目录（默认使用当前 skill 目录下的 data，或指定一个已存在的绝对路径）；支持添加待办、快速添加今日/明日待办、查看今日待办、按状态/优先级/关键字筛选查看全部待办、查看单条、更新、完成、重开、归档，...

This skill appears to be a local Python CLI that stores todos in a SQLite DB and does not attempt network access or request secrets — that's good. However: - The included TECH_SPEC/INTRO docs describe a JSON-monthly-file storage model while the script implements SQLite; ask the publisher which storage format is authoritative or assume the implementation (todo.py) is the source of truth. Stale or mismatched docs are a sign to be cautious. - During first run you must explicitly confirm the data directory. Do NOT accept the default unless you want data written inside the skill's installation directory. Prefer specifying an absolute path under your home directory (e.g., /home/you/.local/share/todo-skill or C:\Users\You\todo-data) to avoid permission surprises and accidental writes to system locations. - Inspect scripts/todo.py yourself (or run it in an isolated environment/container) before giving it persistent access. The code included appears to only read/write local files and use SQLite, but you should verify no unexpected network or shell execution calls exist in the full file. - Make backups of any existing data you care about before running init or migrations (the script can migrate legacy JSON data into SQLite and could change file formats). If you need absolute confidence, ask the publisher to clarify the storage design (JSON files vs SQLite) and provide a signed release or more detailed changelog; otherwise run in a sandboxed environment and point the tool at a safe absolute data directory.

Type: OpenClaw Skill Name: todo-master Version: 1.0.0 The todo-master skill bundle is a well-documented local task management tool using Python and SQLite. The core logic in scripts/todo.py relies exclusively on the Python standard library for file I/O and database management, with no evidence of network activity, data exfiltration, or unauthorized execution. The bundle includes comprehensive documentation (SKILL.md, TECH_SPEC.md) and a legitimate data migration feature for legacy JSON formats.