Auwomo Task

ReviewAudited by ClawScan on May 14, 2026.

Overview

This skill is coherent for Feishu task management, but users should be aware it can use account/team privileges, Cotrace work data, and optional scheduled prompts.

Use this skill only with the intended Feishu/Auwomo account. Review drafts before approving task creation or progress recording, and enable team mode, Cotrace lookup, or cron-based prompts only if you are comfortable with that data being read and summarized.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If approved under the wrong account or parent task, the agent could add unwanted tasks to the workspace.

Why it was flagged

The skill can create Feishu task objects through the CLI, but the documented workflow requires showing a draft and waiting for confirmation.

Skill content
展示草案:"准备创建 [主线] 论文写作,确认吗?" ... 确认后 → 创建 ... auwomo task create --title "[主线] 论文写作"
Recommendation

Review the proposed title, parent task, and active account before approving any create or record action.

What this means

Using team mode may reveal or summarize other people's work data, not just the installer's own tasks.

Why it was flagged

Team mode expands access from the user's own tasks to subordinate/team task data based on the current user's privileges.

Skill content
`--team` 会包含当前用户所有下属的任务。
Recommendation

Use team/admin options only when you intend to review subordinate task data and have the right authorization.

What this means

Actual workstream data could be read and summarized before a task record is created.

Why it was flagged

The skill may call another tool/service to retrieve workstream summaries and details for drafting task records; the Cotrace data boundary is not defined in these artifacts.

Skill content
优先使用 Cotrace 的 work-records 获取实际工作数据 ... echo '{"tool":"get_workstream_summaries" ...}' | ftc call cotrace
Recommendation

Only use the Cotrace-backed flow if you trust that data source and review the generated draft before confirming any record.

What this means

If an operator deploys these templates, the agent may be prompted daily or weekly to inspect tasks, generate reports, or draft records.

Why it was flagged

The reference file provides templates for persistent scheduled prompts to the user's agent, though there is no code or install spec that deploys them automatically.

Skill content
读取此文件内容配置系统 crontab ... 每个 trigger 脚本负责向对应用户的 agent 发送上方模板中的 prompt 文本。
Recommendation

Deploy cron templates only deliberately, keep them visible in system crontab, and preserve confirmation before any write action.