Collaboration Helper
PassAudited by ClawScan on May 1, 2026.
Overview
This is a simple local task tracker that writes collaboration items to a JSON file; its persistence and file-writing behavior are disclosed and fit the stated purpose.
This skill appears safe for local collaboration tracking. Before installing, be aware that it keeps tasks and notes in a persistent JSON file and can be pointed at another data path; avoid storing sensitive information in task notes and confirm the file path before modifying tasks.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the agent or user points the tool at the wrong file, it may create or update task data somewhere unintended.
The CLI allows the caller to choose the JSON state file, and add/complete operations save changes to that path. This is purpose-aligned, but a mistaken path could alter an unintended JSON file.
parser.add_argument("--data", type=Path, default=TASK_FILE_DEFAULT, help="Path to the tasks.json state file.")Use the default data/tasks.json path unless you intentionally want to manage another task file, and review the path before running add or complete.
Task titles and notes may remain available in later sessions and could influence future coordination if users treat them as trusted context.
The skill intentionally keeps persistent collaboration notes that may be reused later. This is expected for a task tracker, but persistent shared notes can carry stale, sensitive, or instruction-like content forward.
The data lives in `data/tasks.json`, so the collaboration state survives across skill runs and reboots.
Keep notes factual, avoid secrets, and review persistent tasks before relying on them for decisions or handoffs.