ClawHub

Todo Tracker

v1.2.0

Manage follow-up items and remind users at appropriate times via heartbeat checks.

⭐ 0· 224·1 current·1 all-time
byNeo Shi@suidge
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (todo reminders, heartbeat-driven checks) matches the included files and behavior. There are no unrelated required binaries, env vars, or external services. The provided cleanup script and templates are appropriate for a self-managed todo skill.
✓
Instruction Scope
SKILL.md instructs the agent to copy templates to memory/todo.json, register heartbeat and trigger keywords, and follow clear rules for marking items. The instructions reference only workspace files (memory/todo.json, HEARTBEAT.md, AGENTS.md) and do not ask the agent to read or exfiltrate unrelated files or secrets.
✓
Install Mechanism
No install spec is provided (instruction-only) and the only code file is a small local Python script. Nothing is downloaded from external URLs or installed from remote package registries.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. The only persistent state is a JSON file in the agent workspace, which matches the skill's purpose.
✓
Persistence & Privilege
The skill does not request 'always: true' and uses normal autonomous invocation via heartbeat triggers (the platform default). It does not attempt to modify other skills or system-wide settings programmatically.
Assessment
This skill appears coherent and limited to local todo management, but before installing: 1) verify the workspace layout on your agent matches the script's TODO_FILE path (the cleaner uses a relative path up from scripts to workspace/memory/todo.json); 2) run the cleaner in --dry-run first to confirm it targets the intended file; 3) ensure your agent will set completed_at / cancelled_at and reminded flags as required (the cleanup depends on completed_at); 4) review HEARTBEAT.md and AGENTS.md changes you are asked to make to confirm you want automatic heartbeat-driven reminders; and 5) if provenance matters, check the referenced GitHub repo/owner (SKILL.md/footer lists a GitHub URL) since the top-level metadata listed the source as unknown. If any of these checks fail or the workspace layout differs, treat installation as potentially disruptive until corrected.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dvxgtsshdjzv3skwbma4ba584zrem

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis
OSLinux · macOS · Windows

Comments