Qordinate - Durable lists, facts, and reminders for OpenClaw agents.

v1.0.0

Qordinate is a chat-native assistant that acts as structured memory for your OpenClaw agents. Use this skill when you want your OpenClaw agent to offload long-term facts, tasks, and reminders into Qordinate over WhatsApp, Telegram, or Slack instead of managing its own database.

0· 825·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (structured memory via Qordinate over chat) matches the runtime instructions: the agent is told to send natural-language messages to Qordinate on WhatsApp/Telegram/Slack. No unexpected credentials, binaries, or installs are requested.
Instruction Scope
Instructions consistently direct the agent to create/update/query lists by sending chat messages to Qordinate. However the guidance explicitly encourages including 'where it came from (email, chat, file)', which implies the agent may send excerpts of emails/files to the external service — a privacy/exfiltration risk. The SKILL.md does not provide safeguards or limits on what the agent may forward.
Install Mechanism
No install spec and no code files (instruction-only) — lowest installation risk. Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill declares no required env vars or credentials, but it depends on the agent having the ability to send messages over WhatsApp/Telegram/Slack. The SKILL.md does not enumerate what channel tokens or bot credentials the agent must already have, which is a minor mismatch in declared vs. implicit requirements. There is no explicit request for unrelated secrets, which is appropriate for the stated purpose.
Persistence & Privilege
always:false and no self-modifying/install behavior. The skill is allowed to run autonomously (platform default); combined with messaging capability this means an agent could autonomously send data to an external service — expected for this skill but something to be aware of operationally.
Assessment
This skill is coherent with its description, but it asks your agent to forward user data to a third-party chat service (Qordinate). Before installing: (1) Confirm you trust qordinate.ai and review its privacy/security policy and data retention terms. (2) Ensure users explicitly opt in to having particular data stored there and avoid sending secrets, passwords, or confidential files. (3) Verify how your agent will send messages (Slack bot token, WhatsApp API, etc.) — the skill doesn't declare those credentials, so ensure they are provisioned safely by your platform. (4) Consider limiting autonomous use (require confirmation) or adding filtering rules so the agent doesn't forward sensitive content automatically. (5) Remember the registry scanner had no code to analyze (instruction-only), so network/privacy risks come from runtime behavior rather than installed code.

Like a lobster shell, security has layers — review code before you run it.

latestvk978g1rc305j3fgpq1d4mxebv980pv4clearningvk978g1rc305j3fgpq1d4mxebv980pv4cmemoryvk978g1rc305j3fgpq1d4mxebv980pv4crelationalvk978g1rc305j3fgpq1d4mxebv980pv4csqlvk978g1rc305j3fgpq1d4mxebv980pv4c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments