ClawHub

HZL

v3.1.0

Persistent task ledger for agent coordination. Plan multi-step work, checkpoint progress across session boundaries, and coordinate across multiple agents wit...

⭐ 8· 3.9k·7 current·7 all-time
byTrevin@tmchow
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description describe a local-first task ledger; the skill only requires the hzl binary and provides brew/npm install options for that binary. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
SKILL.md is an instruction-only guide that tells the agent to run hzl CLI commands (listing, creating, claiming, checkpointing tasks). All referenced commands and paths are directly related to task ledger operations. The doc explicitly documents destructive commands (hzl init --force, task prune --yes) and warns about them; follow-up guidance should ensure the agent never runs those without explicit user approval.
✓
Install Mechanism
Installers are Homebrew and npm (hzl / hzl-cli), both common public package mechanisms. No ad-hoc download URLs or archive extractions are present.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. Runtime parameters like --agent and --project are normal operational inputs and not secrets.
ℹ
Persistence & Privilege
always:false (normal) and the skill allows autonomous invocation (default). While this is expected, an autonomously-invoking agent with this skill could run destructive hzl commands if not instructed to ask for confirmation. Consider enforcing explicit confirmation before any destructive action.
Assessment
This skill is a helper for the hzl CLI and looks coherent. Before installing, verify you trust the hzl Homebrew or npm package source (check the GitHub repo linked in the skill). If you allow the agent to invoke skills autonomously, require explicit user confirmation for destructive commands (hzl init --force, task prune --yes) because the skill documents commands that permanently delete data. If you prefer extra safety, install the hzl binary manually and only enable the skill when you want agents to interact with your task ledger.

Like a lobster shell, security has layers — review code before you run it.

latestvk9711vcfhzve6tw51r5qhqtr7d82pjq2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧾 Clawdis
Binshzl

Install

Install HZL (Homebrew)
Bins: hzl
Install HZL (npm)
Bins: hzl
npm i -g hzl-cli

Comments