project-manager-pro
v1.0.0Manage and organize your tasks and projects conversationally with automatic prioritization, due dates, breakdowns, status updates, and check-ins—no UI needed.
⭐ 0· 44·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (conversational task & project management) match the files and behavior: SKILL.md describes parsing user input and reading/writing JSON task/project stores under ~/.openclaw/workspace/pm-pro, and the scripts operate on those same files. There are no requests for unrelated credentials or external services.
Instruction Scope
Instructions direct the agent to read/write local files (~/.openclaw/workspace/pm-pro/tasks.json, projects.json, check-in-log.json) and to send task content to the user's configured LLM provider (this is called out in SECURITY.md). The skill also mentions cross-tool integrations and 'respect the user's timezone from their agent config' — both are plausible but imply the agent may read other local agent configuration/context. No instructions ask the agent to exfiltrate data or access unrelated system files.
Install Mechanism
There is no platform install spec (instruction-only skill) and all code is included. setup.sh will attempt to install jq via brew/apt-get/dnf if missing (it uses sudo for apt/dnf). That is a relatively standard dependency install but could prompt for privilege escalation on systems where jq is absent; otherwise scripts only create files under the user's home directory.
Credentials
The skill requires no environment variables, no external credentials, and no config paths beyond its own data directory. The request surface is appropriately minimal for a local task manager.
Persistence & Privilege
always is false. The skill writes only to its own directory under the user's home workspace and updates its own settings and data files. It does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: it stores task and project data locally and uses your agent/LLM to manage tasks. Before installing, consider: 1) setup.sh may attempt to install jq via your system package manager (may require sudo); review the script and run it manually if you prefer. 2) All task text is processed by your configured LLM provider (see SECURITY.md) — avoid storing highly sensitive secrets in tasks. 3) The skill will create and modify files under ~/.openclaw/workspace/pm-pro (tasks.json, projects.json, archives, exports); include that directory in your backup/encryption strategy if needed. 4) Cross-tool integrations are described but are agent-driven; verify you want those integrations enabled. If you need extra assurance, inspect the scripts locally and run setup.sh in a controlled environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk970tb02ex7qmgrw5p6ct8br3x83z3z4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.