Todo Accelerator
v0.1.0Use when a user needs to add a new task or record a pending to-do item; when prompting an Agent to execute a pending task; during Agent heartbeat events to p...
⭐ 0· 99·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (to-do management, agent heartbeat work pickup, add/list/commit tasks) match the provided files and the single Python script. The script manipulates an Obsidian-style Kanban board and companion markdown notes and implements the commands described in SKILL.md.
Instruction Scope
SKILL.md's runtime instructions are specific and limited: run the included Python script from the skill directory with a workspace-local config, initialize templates, enable heartbeat if desired, and call add-todo / work-on-todo / commit / list-pending. The instructions require the agent to read/write board and note files in the agent's workspace (expected for this purpose). There are no instructions to read unrelated system files, access external credentials, or send data to remote endpoints.
Install Mechanism
No install spec; this is instruction-only plus a local Python script. The only external dependency is PyYAML (documented in initialization.md). No remote downloads or archive extraction are used.
Credentials
The skill requests no environment variables, no credentials, and no config paths outside the agent workspace. File access is confined to the board file, notes folder, and a workspace config specified by the user — which is proportionate for a local to-do manager.
Persistence & Privilege
always is false and default autonomous invocation is allowed (normal). The skill writes a workspace-local config file and updates notes/board inside the workspace; it does not request permanent platform-wide privileges or modify other skills' configs. SKILL.md asks the user to enable heartbeat in the agent configuration to allow automatic pickup — that is a user action and not an unexpected escalation by the skill itself.
Assessment
This skill appears coherent: it runs a bundled Python script that reads and writes a Kanban board and markdown notes inside the agent workspace and requires PyYAML. Before installing, verify the workspace paths you provide are not pointing to any sensitive system or credential directories (provide only a workspace folder you control). If you enable heartbeat, the agent can autonomously call work-on-todo during heartbeats — enable that only if you want autonomous task pickup. If you have security concerns, inspect scripts/todo.py locally (it appears to perform only file I/O and YAML parsing) or run initialization and commands in a confined/test workspace first. There are no external network endpoints or credential requirements requested by the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97e8rep52v71ds1n4f68m4mp183avcb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.