Tasks Skill
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent local task tracker; it runs local scripts and stores tasks persistently, but those behaviors are disclosed and aligned with its purpose.
This skill appears safe for normal local task tracking. Before installing, make sure sqlite3 is available, understand that tasks are stored in ~/.no-nonsense/tasks.db by default, avoid putting secrets in task text, and review delete/update actions before letting an agent perform them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using the skill can modify or remove tasks in the local task database.
The skill can delete task records from its configured local database. This is explicitly part of the task-manager purpose and is scoped to a validated numeric task ID, but deletion is still a destructive operation.
sqlite3 "$DB_PATH" "DELETE FROM tasks WHERE id = $TASK_ID;"
Use delete and update commands deliberately, and keep a backup if the task list is important.
The skill may fail until sqlite3 is installed, and users should notice that the registry metadata is less complete than the runtime documentation.
The runtime documentation discloses a sqlite3 dependency even though the supplied registry requirements list no required binaries, so automated installation checks may not fully reflect what the scripts need.
- `sqlite3` CLI tool must be installed
Install or verify sqlite3 before use, and treat the SKILL.md prerequisites as authoritative for this package.
Task content remains on disk and may be surfaced later when listing or showing tasks.
Task titles, descriptions, tags, and statuses are stored persistently in a local SQLite database. This is expected for a task manager, but the stored content can be reused or displayed in later sessions.
Default location: `~/.no-nonsense/tasks.db`
Avoid storing secrets in task titles or descriptions, and choose the database path intentionally if tasks contain sensitive information.