Project Manager

Manage internal projects with JSON-based tasks, move them on Kanban, notify David on review/blocked, and sync tasks with Apple Reminders.

Security Scan

The skill's behavior mostly matches a local JSON-backed Kanban manager, but hard-coded user file paths, an unclear notification mechanism, and an implicit dependency on an external 'apple-reminders' skill make its scope and data access ambiguous and potentially privacy-sensitive.

Purpose & Capability

Name and instructions describe a local JSON-based project manager with Kanban actions and Apple Reminders sync — that aligns with the required operations (read/insert/update JSON, call a Reminders sync). However, the SKILL.md hard-codes a single user path (/Users/fz1/clawd/data/pm/projects.json) which is specific to one machine/account and unlikely to be appropriate for general deployment. The mention of Apple Reminders is expected for sync functionality but the skill does not declare how authentication or access is handled.

Instruction Scope

Instructions explicitly direct the agent to read and modify a local JSON file at a fixed path and to call another skill ('apple-reminders') when sync is required. They also instruct the agent to "notify David in the chat" when tasks move to review/blocked but do not specify which chat system, which identity for David, or what credentials to use — this ambiguity could lead the agent to access address books, chat tokens, or other communication integrations to find/send messages. The fixed file path and vague notification steps are scope creep relative to a generic project manager description.

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest installer risk. Nothing will be written to disk by an installer; actions occur at runtime according to SKILL.md.

Credentials

The skill declares no required environment variables or credentials, which is plausible for a purely local file editor. But it relies on syncing via an external 'apple-reminders' skill (which likely needs Apple authentication) and on notifying a user in chat (which likely needs chat credentials). Those credentials are not declared here. The hard-coded /Users/fz1/... path suggests the skill was written for a single user environment and may attempt to access personal files that are unrelated to a generic 'Project Manager' use.

Persistence & Privilege

always is false and the skill does not request persistent installation or system-level config changes. It does request autonomous invocation by default (platform standard) but provides no instructions to modify other skills or system-wide settings.

What to consider before installing

This skill is mostly coherent for a local JSON-backed Kanban manager, but there are three things to check before installing or enabling it: 1) File path: SKILL.md uses a hard-coded path (/Users/fz1/clawd/data/pm/projects.json). Confirm whether that path is correct for your machine or change the skill to use a configurable project file. If you enable the skill as-is, it will read/write that exact file — which could be someone else's data or not present. 2) Notifications: The instructions say to "notify David in the chat" but do not say which chat service or how to authenticate. Ask how notifications are sent and which account will be used. Without clarification the agent might attempt to access contact lists or chat tokens. 3) Reminders sync: The skill calls another skill ('apple-reminders') for syncing, but does not declare credentials or how that skill obtains them. Inspect the apple-reminders skill (or your agent's configured integrations for Apple Reminders) to ensure proper, limited authorization. Practical steps: review/edit SKILL.md to make the project file path configurable, require/declare the notification channel and credentials, and verify the apple-reminders skill's permissions. Test in a sandboxed agent or with a backup of any existing projects.json to avoid accidental data loss. If you cannot confirm the owner or intended user (the path suggests a particular user), be cautious about granting the skill access to your agent.

Skill: Project Manager (Vivi OS)

Descripción

Gestiona el sistema de proyectos interno basado en JSON. Permite crear tareas, moverlas por el tablero Kanban y sincronizar con Apple Reminders.

Ubicación de Datos

Base de datos: /Users/fz1/clawd/data/pm/projects.json

Comandos (Mental Model)

1. Listar Tareas

• Acción: Leer el JSON y mostrar las tareas agrupadas por columna o filtradas por proyecto.
• Uso: "Qué tenemos pendiente?", "Estado del proyecto SaaS".

2. Añadir Tarea (Add)

• Acción: Insertar objeto en el array tasks.
• Campos: projectId, title, priority (low/med/high/crit), sync (true/false).
• Efecto Secundario: Si sync: true, ejecutar skill apple-reminders para crear recordatorio.

3. Mover Tarea (Move)

• Acción: Actualizar status de una tarea.
• Estados: todo -> in_progress -> review -> done (o blocked).
• Notificación: Si se mueve a review o blocked, avisar a David en el chat.

4. Sincronizar (Sync)

• Acción: Forzar actualización de tareas con sync: true en Apple Reminders (si cambiaron de estado).

Reglas de Negocio

1. Review: Solo mover a review si necesito aprobación explícita de David.
2. Focus: Máximo 3 tareas en in_progress simultáneamente.
3. Night Shift: El turno de noche debe leer este JSON para saber qué priorizar si no hay órdenes explícitas.