Easy TODO list management for busy crustaceans and their humans
v1.0.0Personal TODO list manager. Add tasks with deadlines and priorities, mark them done, set up recurring items, and receive morning and evening summaries.
⭐ 0· 212·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's stated purpose (local TODO manager) matches the included code (cli.js) and required binary (node). However, SKILL.md says tasks are persisted in ~/.openclaw/skills/todo/todos.md while cli.js defaults to writing todos.md next to the script (__dirname). This mismatch may cause surprises about where data is stored.
Instruction Scope
SKILL.md instructs the agent to run the CLI and to ask follow-up questions for missing due dates — that is appropriate. It also directs the agent to run scheduled commands automatically (morning/evening briefings and a daily materialize) 'without waiting for the user to ask.' That grants the agent recurring autonomous activity related to this skill; it's coherent with the feature but worth confirming you want autonomous scheduled runs. The README instructs 'never edit todos.md by hand' and indicates cli.js manages the file, which is consistent.
Install Mechanism
No install spec; this is an instruction-only skill with a single script file. The script is plain Node.js with no external network downloads or package installs — low risk from the install mechanism.
Credentials
The skill declares no required environment variables or credentials. The CLI optionally respects a TODOS_FILE env var for custom storage location, which is reasonable and limited in scope.
Persistence & Privilege
always:false (normal). The SKILL.md requests the agent run scheduled briefings automatically; to achieve that the agent will need permission to invoke the skill on a schedule. This increased autonomous activity is coherent with the feature but raises the usual concern about unattended periodic execution (reads/writes the local todos file and emits summaries).
Assessment
This skill is broadly coherent with its purpose (a simple local TODO CLI) and does not ask for secrets or network access. Before installing, consider: 1) Where will the script live? SKILL.md says ~/.openclaw/skills/todo/todos.md but the code writes todos.md next to cli.js by default — set TODOS_FILE or place the script in the intended directory so you know where data is stored. 2) The skill asks the agent to run scheduled briefings automatically — confirm you want the agent to run the skill on a schedule (it will read/write your todos file and output task summaries). 3) The included cli.js appears to be standalone and dependency-free, but the provided file preview is truncated and contains what looks like a coding bug (an incomplete reference like readStore().tas in the truncated area). Review the full cli.js for typos or runtime errors before trusting it with important data, and test it in a safe environment. If you want stronger guarantees, inspect the full script file for hidden network calls (none are visible here) and adjust the TODOS_FILE env var to a location you control.Like a lobster shell, security has layers — review code before you run it.
latestvk97cwbeht94rzm0w3970ejb4n18333sc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsnode