Recipe Review Overdue Tasks
PassAudited by ClawScan on May 1, 2026.
Overview
This is a read-only Google Tasks recipe; the main thing to notice is that it uses your configured gws Google account to view task lists and incomplete tasks.
This skill appears safe and purpose-aligned if you want an agent to review overdue Google Tasks. Before installing, make sure the gws CLI and gws-tasks skill are trusted and configured for the correct Google account, because the agent will be able to view task-list names and incomplete task details.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may see task-list names and incomplete task details, including due dates, for the configured Google account.
These commands access Google Tasks through the local gws setup. That is purpose-aligned, but it uses the privileges of whichever Google account/profile gws is configured to use.
List task lists: `gws tasks tasklists list --format table`; List tasks with status: `gws tasks tasks list --params '{"tasklist": "TASKLIST_ID", "showCompleted": false}' --format table`Use this only with a trusted gws configuration for the intended Google account, and confirm you are comfortable exposing those tasks to the agent.
If the local gws tool or gws-tasks skill is untrusted or misconfigured, the actual account access may differ from what this simple recipe describes.
The recipe depends on preinstalled external tooling and a companion skill. The recipe itself does not install code, but its behavior depends on those components being legitimate.
requires:
bins:
- gws
skills:
- gws-tasksKeep gws and gws-tasks installed from trusted sources and review their permissions before using this recipe.
