taskwarrior

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent workspace-local Taskwarrior helper that can change local task records but keeps the behavior disclosed and scoped.

Before installing, be comfortable with the agent managing a workspace-local Taskwarrior database. Keep task changes specific, request previews for bulk edits, and install the `task` binary only from a trusted source.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can create, edit, start, stop, annotate, or complete tasks in the workspace Taskwarrior database; mistakes could change local task records.

Why it was flagged

The skill documents that it can make local task-database changes, while also placing explicit limits on destructive and broad bulk operations.

Skill content
Write (safe):
- `task add ...`
- `task <id> modify ...`
- `task <id> done`
...
## Not allowed unless explicitly requested
- `task delete`
- `task purge`
- bulk changes without preview
Recommendation

Use clear task IDs or filters for changes, ask for previews before bulk edits, and only request delete or purge actions when you intend them.

What this means

The skill's behavior depends on the installed `task` program in the environment.

Why it was flagged

The skill relies on an external Taskwarrior binary rather than bundled code; this is purpose-aligned, but users should ensure the binary comes from a trusted package source.

Skill content
This skill **requires Taskwarrior to already be available** in the runtime environment ... This skill **does not perform system-level installs**
Recommendation

Install Taskwarrior from a trusted OS package manager or base image and verify `task --version` before use.