Todo Manager

• Analyzed: May 11, 2026, 4:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: e3d3a77397f0aae2368bff4ad66681edfcacf6daf18034a8d4ef7b7b1a01fc8e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines a simple todo manager. The `_meta.json` file contains standard metadata. The `SKILL.md` file describes the skill's functionality, usage examples, and specifies a local storage path (`~/.openclaw/workspace/todos.md`) for its data. There are no instructions or code snippets that suggest malicious intent, such as data exfiltration, unauthorized command execution, persistence mechanisms, or prompt injection attempts to subvert the agent's behavior beyond its stated purpose. The file access is confined to a designated workspace file, which is appropriate for a stateful skill.