Google Tasks

PassAudited by ClawScan on May 16, 2026.

Overview

This skill is a disclosed Google Tasks integration through ClawLink, with expected account pairing and write actions guarded by confirmation guidance.

This skill appears coherent and purpose-aligned. Before installing, make sure you trust the ClawLink plugin and service, connect only the intended Google account, and approve task changes only after reviewing previews or confirmations.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create, edit, complete, move, or delete tasks if the user authorizes those actions.

Why it was flagged

The skill can mutate Google Tasks data, including deletion, but the artifact explicitly frames these actions as requiring confirmation.

Skill content
Create or update tasks after confirmation ... Mark tasks complete or move them after confirmation ... Delete tasks after confirmation
Recommendation

Review previews carefully before approving task changes, especially deletes or bulk updates.

What this means

Using the skill requires connecting an account through ClawLink so the agent can act on Google Tasks within the granted permissions.

Why it was flagged

The skill relies on a local ClawLink credential and delegated Google Tasks access. This is expected for the integration and includes credential-handling guidance.

Skill content
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`. The user should not paste raw credentials into chat.
Recommendation

Only connect the intended Google account, grant the minimum scopes offered, and revoke access from ClawLink or Google account settings if no longer needed.

What this means

The actual Google Tasks operations are performed by the ClawLink plugin and hosted service, not by code included in this skill package.

Why it was flagged

The instruction-only skill depends on a separately installed ClawLink plugin. This is disclosed and purpose-aligned, but it means the reviewed artifact is not the full runtime implementation.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the plugin only from the named ClawHub source and verify ClawLink’s documentation/source if you need stronger supply-chain assurance.

What this means

Task-related requests and credential-mediated actions may be handled through ClawLink as part of the integration.

Why it was flagged

The skill routes integration setup and tool execution through an external hub. This is disclosed and aligned with the skill purpose, but it introduces a third-party service boundary.

Skill content
Powered by [ClawLink](https://claw-link.dev), an integration hub for OpenClaw that handles hosted connection flows and credentials
Recommendation

Use this skill only if you trust ClawLink with the Google Tasks access you grant, and review ClawLink’s privacy/security documentation.