Department Manager

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a benign local department/task tracker, with the main caution that it saves task and output text on your computer for later reuse.

This skill is reasonable to install if you want a local department/task tracker. Be aware that task descriptions and completion outputs are saved locally, so do not put passwords, API keys, private customer data, or untrusted instructions into those fields unless you are comfortable retaining and later reviewing them.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If task descriptions or outputs contain secrets, private plans, or untrusted instructions, they may be retained locally and resurfaced to the agent in later sessions.

Why it was flagged

The script stores user-provided task text and completion output in a persistent local JSON file that can later be shown in status/report commands.

Skill content
DEFAULT_DATA_DIR = os.path.expanduser("~/.openclaw/department-manager") ... "task": args.task ... t["output"] = args.output or ""
Recommendation

Avoid storing secrets in tasks or outputs, review reported text before acting on it, and delete ~/.openclaw/department-manager/departments.json if you no longer want the stored task history.