Task ToDo
PassAudited by ClawScan on May 1, 2026.
Overview
This skill coherently implements a local SQLite task list; the main thing to notice is that task contents persist in a local database.
This appears safe for ordinary local task tracking. Before installing, be aware that tasks are saved to a local tasks.db file in the current directory, so do not store passwords, tokens, or other sensitive information there unless you are comfortable managing that file yourself.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Task titles and descriptions may contain personal or project information and will remain in the local database until deleted.
This confirms that task data is stored persistently on disk and can be retrieved or modified in later sessions.
- **Database File**: `tasks.db` (created automatically in current directory)
Avoid storing secrets or highly sensitive details in tasks, and delete tasks or the local tasks.db file when you no longer want the data retained.