Agent Task Tracker
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent local task-tracking skill, but it persistently records task details across sessions and has a minor metadata mismatch worth noticing.
This skill appears safe for its stated purpose if you want automatic local task tracking. Be aware that it records task details across sessions, including background commands and server names, so avoid letting it store secrets or sensitive command arguments.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your agent may preserve task summaries, commands, links, and operational notes between sessions.
The skill stores task state in persistent memory and reuses it across sessions, so sensitive task details or misleading stored context could influence later work.
`memory/tasks.md` — single source of truth ... `Session start` → read `memory/tasks.md` to resume awareness
Avoid putting secrets, credentials, or sensitive command-line arguments into tracked task details; periodically review or clear memory/tasks.md if needed.
The agent may update its task tracker without you explicitly invoking the skill each time.
The skill is designed to operate persistently and automatically as part of the agent workflow, though this is disclosed and scoped to task-state tracking.
Survives session resets. Triggers automatically — not user-invoked.
Install only if you want automatic task-state tracking across sessions; review the task file behavior if you prefer manual tracking.
The package identity information is not fully consistent, which can make provenance harder to verify.
The internal metadata differs from the supplied registry metadata, which lists a different owner ID, slug, and version. With no code present, this is a provenance note rather than evidence of harmful behavior.
"ownerId": "kn7ehatb09fy589mr5be2jx1bh80pz4v", "slug": "agent-task-tracker", "version": "1.1.0"
Confirm you are installing the intended skill/version from the intended publisher before relying on it.