Task Watcher Skill

• Analyzed: May 11, 2026, 5:39 AM
• Findings: 1
• Version: 1.2.1
• Hash: 3cd59c1519f66a0a7c203d3958020d49db3ab961356a4aa69770b7d30e236926
• Source: palm
• External report: View on VirusTotal

Findings (1)

The task-watcher skill bundle is a well-structured asynchronous monitoring system designed to track task states (like content reviews or CI/CD jobs) and send notifications. The code follows a clean, modular architecture using the Python standard library, with clear separation between data persistence (JsonlTaskStore), state checking (Adapters), and notification delivery (Notifiers). While it utilizes subprocess.run in notifiers.py to trigger Discord alerts via the OpenClaw CLI, it does so using safe argument lists and for the explicitly stated purpose of the skill. No evidence of malicious intent, data exfiltration, or prompt injection was found.