ClawKeeper — Tasks & habits in a plain markdown file
PassAudited by ClawScan on May 1, 2026.
Overview
ClawKeeper appears to be a straightforward local task and habit manager, but it installs an external npm CLI and can read, edit, and delete a shared local markdown task file.
Before installing, make sure you trust the npm package, set CLAWKEEPER_DIR to a dedicated folder, and remember that agents using this skill can read and change the tasks, habits, and notes stored there.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill will rely on code from the npm package rather than code shown in the provided artifact.
The skill requires installing and running an external npm CLI package. This is central to the stated purpose, but users should verify they trust the package source.
node | package: clawkeeper | creates binaries: clawkeeper
Install only if you trust the npm package, and prefer a pinned or verified package version where available.
An agent using fuzzy text commands could edit, complete, or delete an unintended task or habit.
The CLI can mutate or delete local task and habit records, and fuzzy text matching could affect the wrong item if used carelessly.
clawkeeper task delete --text "Buy groceries" ... Use `--id` for precise lookups or `--text` for fuzzy substring matching.
Use item IDs for edits and deletions when possible, and review destructive changes before applying them.
Personal notes or habit history may persist across sessions and be visible to other agents configured to use the same directory.
The skill intentionally stores persistent task, habit, and note context in a shared local directory, which agents may later read and reuse.
All data is stored as markdown at the path set by `CLAWKEEPER_DIR` ... This allows multiple agents to share the same task list.
Keep CLAWKEEPER_DIR scoped to non-sensitive task data, and avoid sharing that directory with agents that should not see or act on the same notes.