Qordinate - Durable lists, facts, and reminders for OpenClaw agents.

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent, but it broadly encourages agents to send and persist user facts, tasks, contacts, and reminders in an external chat service without clear approval, retention, or sensitivity limits.

Install only if you are comfortable with an agent sending selected facts, tasks, contacts, and reminders to Qordinate over WhatsApp, Telegram, or Slack. Set clear rules for what may be stored, require confirmation for sensitive information, and verify how Qordinate handles retention and deletion.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private or business-sensitive facts, contacts, tasks, links, and reminders could be stored externally and reused later, including if the stored information is wrong or becomes outdated.

Why it was flagged

This gives the agent broad discretion to persist user information into an external long-term memory store, without visible limits on sensitivity, scope, retention, deletion, or user confirmation.

Skill content
Whenever the agent thinks "the user will care about this later", it should create or update something in a list, not keep it in ephemeral memory.
Recommendation

Require explicit user approval before storing sensitive information, define allowed data categories, document retention/deletion controls, and treat retrieved memory as context to verify rather than unquestioned truth.

What this means

Information sent to Qordinate may also be processed or retained by the chosen chat provider, and bot replies may later influence the agent's work.

Why it was flagged

The skill intentionally routes agent memory through external chat platforms and a Qordinate bot, so user data leaves the OpenClaw environment and enters a third-party communication channel.

Skill content
send messages to Qordinate on WhatsApp, Telegram, or Slack
Recommendation

Verify the official Qordinate contact before use, send only the minimum necessary information, and avoid treating chat replies as executable instructions.

What this means

Messages to Qordinate may appear to come directly from the user and may disclose user data through their personal or work chat account.

Why it was flagged

The skill depends on the agent being able to send chat messages using the user's messaging identity. This is purpose-aligned but sensitive.

Skill content
Your OpenClaw setup must already be able to send messages on one of these channels as the user (e.g. controlling the desktop/web client).
Recommendation

Limit the agent to the intended Qordinate chat, require confirmation for sensitive messages, and make sure the user understands which account and channel will be used.