Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward local todo manager that stores tasks in a disclosed JSON file, with no evidence of hidden network access, privilege escalation, or destructive behavior beyond user-directed todo edits.
Before installing, confirm you are comfortable with the skill creating and modifying ~/.openclaw/workspace/memory/todos.json. Use explicit commands for completion and deletion, and be aware that the interface is written in Chinese and the script help text has a minor filename mismatch.
The declared description understates the actual behavior by omitting fixed-path storage in the user's home directory and more advanced query and metadata handling. When a skill's documented purpose does not accurately match its effective capabilities, users may authorize or invoke it without understanding the extent of persistent data processing.
The skill performs file reads and writes to a persistent path but does not declare any tool scope or permissions boundary. This weakens reviewability and user consent, and can lead to unexpected persistent modification of local data when the skill is invoked.
The display name, description, trigger phrases, and command examples are all presented only in Chinese, with no indication that users may interact in other languages or that the skill is intentionally limited to a Chinese-only context. This can constitute a language policy issue when a specific language is imposed without opt-in or justification.
The skill description mentions storage and deletion but does not clearly warn that actions persistently modify a local JSON file. Users may treat interactions as ephemeral and unintentionally create, alter, or remove records on disk without informed consent.
Broad trigger phrases like common everyday words can cause accidental activation in unrelated conversations. Because this skill writes and deletes persistent local data, unintended invocation can result in unauthorized or mistaken changes to the user's todo store.
This code's description and all user-facing CLI messages are written in Chinese, which imposes a specific language on users. Under the policy, locale-specific behavior should either provide user opt-in/choice or be clearly documented as a justified regional constraint, neither of which is present here.
The module docstring says 'notebook - 待办事项管理脚本', and the usage text later refers to 'notebook.py' rather than the actual todos skill/file. This is an active documentation mismatch that can mislead users or integrators about what component they are invoking, even though the underlying behavior is still todo management.
The help output repeatedly tells users to invoke 'notebook.py', while the analyzed file is 'scripts/todos.py'. This is a direct intent/documentation mismatch in user-facing guidance, not just an omission, and may cause incorrect integration or execution.
No suspicious patterns detected.
