Project Manager
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: project-manager Version: 1.0.0 The skill bundle defines a project management agent that interacts with a local JSON database (`/Users/fz1/clawd/data/pm/projects.json`), integrates with an `apple-reminders` skill, and can send notifications to a specific user ('David in the chat'). All described actions and capabilities in SKILL.md are clearly aligned with the stated purpose of managing projects and lack any indicators of malicious intent, such as data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts to subvert the agent's core function.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Adding, moving, or syncing tasks can change the local project database, create or update Apple Reminders, and send a chat notification to David.
The skill explicitly directs the agent to mutate a project task database and trigger external side effects. These actions are central to the stated project-management purpose, but users should notice that the workflow changes data and may send notifications.
Añadir Tarea ... Insertar objeto en el array `tasks` ... Si `sync: true`, ejecutar skill `apple-reminders` ... Mover Tarea ... Actualizar `status` ... avisar a David en el chat.
Use add/move/sync only when those side effects are intended, and review task status changes before asking the skill to apply them.
The skill may act through the user's configured Reminders or chat accounts when syncing tasks or notifying David.
Creating reminders and sending chat messages imply use of the user's available Reminders/chat authority. The behavior is disclosed and purpose-aligned, with no artifact evidence of credential capture or misuse.
ejecutar skill `apple-reminders` para crear recordatorio ... avisar a David en el chat
Confirm the connected Reminders and chat accounts are the intended ones, and keep those integrations scoped to the minimum access needed.
Project details stored in the JSON file may shape future prioritization and could include private business context.
The skill relies on persistent project data and instructs future work to use that data for prioritization. This is expected for a project manager, but persistent task content can influence later agent behavior.
Base de datos: `/Users/fz1/clawd/data/pm/projects.json` ... Night Shift: El turno de noche debe leer este JSON para saber qué priorizar si no hay órdenes explícitas.
Keep the JSON limited to intended project/task information, avoid storing secrets or instructions inside task text, and review it periodically for accuracy.