Tasks Skill

• Analyzed: May 12, 2026, 3:08 AM
• Findings: 1
• Version: 1.1.0
• Hash: 03eef9cf77b9961864fedde437139ffc030738aed2bc347640ec7e0a75ded08c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'no-nonsense-tasks' is a benign SQLite-based task manager. It demonstrates robust security practices, including explicit SQL injection protection through input validation (`validate_task_id`, `validate_status`) and string escaping (`sql_escape`) for all user-controlled inputs before they are passed to `sqlite3` commands, as detailed in `scripts/lib.sh` and consistently applied across all `scripts/*.sh` files. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The `SKILL.md` and `AGENT.md` files serve as clear documentation and development guides, respectively, and contain no prompt injection attempts or instructions for the AI agent to deviate from its stated purpose.