Crimson DevLog

A standardized journaling skill for OpenClaw agents to track progress, tasks, and project status using dev-log-cli.

Security Scan

The skill's files, instructions, and install helper are consistent with a dev-log CLI integration and do not request unrelated credentials or escalated privileges.

Purpose & Capability

Name/description announce a dev log integration using dev-log-cli; SKILL.md usage examples and the setup.sh explicitly install and invoke that CLI — the declared purpose aligns with the requested artifacts.

Instruction Scope

Runtime instructions only call a local CLI (devlog) to add/list/search/view logs; they do not instruct reading unrelated system files, environment secrets, or sending data to external endpoints. Note: SKILL.md and dev-log-cli imply storing logs in a local SQLite DB, but the skill does not instruct sending data elsewhere.

Install Mechanism

setup.sh bootstraps pipx (via python3 -m pip install --user pipx) and runs `pipx install dev-log-cli`. This pulls packages from PyPI (public registry) and writes to the user's local install path (~/.local/bin). That's expected for a Python CLI but has the usual moderate risk of executing third-party code fetched from the network; no obscure URLs or extract-from-arbitrary-URL behavior is present.

Credentials

The skill requests no environment variables, credentials, or config paths beyond standard user-level installs — proportional to its purpose.

Persistence & Privilege

The skill is not always-enabled and does not request elevated or system-wide privileges. The setup script modifies only the invoking user's environment (installs into user site and ensures PATH), which is appropriate for installing a user-level CLI.

Assessment

This skill appears coherent and focused on using the dev-log-cli. Before installing, review the dev-log-cli project on PyPI/GitHub (check recent releases, maintainer reputation, and package contents) because setup.sh will download and install that package from the network into your user environment. If you are concerned about supply‑chain risk or sensitive data leakage, consider: (1) running installation in an isolated environment (container or VM), (2) pinning a vetted package version instead of installing latest, and (3) checking where the CLI stores its SQLite database and ensuring it won't contain or transmit secrets you don't want logged.

DevLog Skill 🦞

A standardized journaling skill for OpenClaw agents to track progress, tasks, and project status using dev-log-cli.

Description

This skill enables agents to maintain a professional developer log. It's designed to capture context, project milestones, and task statuses in a structured SQLite database.

Requirements

• dev-log-cli (installed via pipx)

Links

• GitHub: https://github.com/CrimsonDevil333333/dev-log-cli
• PyPI: https://pypi.org/project/dev-log-cli/
• ClawHub: https://clawhub.com/skills/devlog-skill (Pending Publication)

Usage

📝 Adding Entries

Agents should use this to log significant progress or blockers.

devlog add "Finished implementing the auth module" --project "Project Alpha" --status "completed" --tags "auth,feature"

📋 Listing Logs

View recent activity for context.

devlog list --project "Project Alpha" --limit 5

📊 Viewing Stats

Check project health and activity.

devlog stats --project "Project Alpha"

🔍 Searching

Find historical context on specific topics.

devlog search "infinite loop"

🛠️ Editing/Viewing

Detailed inspection or correction of entries.

devlog view <id>
devlog edit <id>

Internal Setup

The skill includes a setup.sh to ensure the CLI is available.