GoalGetter

PassAudited by ClawScan on May 1, 2026.

Overview

GoalGetter appears to be a simple local markdown task tracker with disclosed file storage and no evidence of hidden network, credential, or destructive behavior.

This skill looks safe for normal task and goal tracking. Before installing, understand that it will create and update local files under ~/.openclaw/goalgetter/ and may use read/write or simple shell commands to do so. Avoid putting passwords, tokens, or other secrets into tasks or goals, and prefer the ClawHub install path over manually cloning an unpinned repository.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The assistant may create or change local task and goal files when you ask it to manage tasks.

Why it was flagged

The skill documents local command/file operations using user-provided task text. This is expected for a markdown task manager, but it means the agent may modify local files and should keep operations scoped and safely quoted.

Skill content
echo "- [ ] $TEXT" >> ~/.openclaw/goalgetter/tasks.md
Recommendation

Use the skill for the intended directory only, and avoid asking it to run broader shell commands outside ~/.openclaw/goalgetter/.

What this means

If you install manually from GitHub, you may install a different version than the one reviewed here.

Why it was flagged

The README offers an optional manual installation from a live GitHub repository rather than a pinned commit. This is not an automatic install action, but users who use it may receive files that differ from the reviewed artifacts.

Skill content
git clone https://github.com/Steffano198/goalgetter.git ~/.openclaw/workspace/skills/goalgetter
Recommendation

Prefer the reviewed ClawHub package, or inspect and pin the repository version before manual installation.

What this means

Your tasks, goals, and completion history will remain on disk and may be reused by the assistant when you ask about them later.

Why it was flagged

The skill creates persistent local markdown files that may be read in later task-management interactions. This is central to the skill, but stored task text can influence future outputs.

Skill content
Default: `~/.openclaw/goalgetter/` ... `tasks.md` - Todo list ... `goals.md` - Goal tracking with streaks ... `done/` - Archive of completed items
Recommendation

Do not store highly sensitive secrets in task or goal text, and periodically review or edit the markdown files if needed.