Back to skill
Skillv1.3.0
VirusTotal security
Todo List 待办事项管理 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 6:15 AM
- Hash
- a366ccba186a91409326f1fd115fcefa553d4d68dddbdddf3b132a832504a974
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: todo-list Version: 1.3.0 The skill bundle is a functional todo list manager that supports task scheduling, tagging, project grouping, and file attachments. It uses the `openclaw` CLI for sending notifications and managing cron jobs. Security features are implemented in `scripts/todo.py`, such as path validation and size limits for attachments to prevent unauthorized file access. While some internal calls to `subprocess.run` still use `shell=True` (a potential vulnerability if local configuration files are tampered with), the overall logic is transparent, well-documented, and lacks any indicators of malicious intent or data exfiltration.
- External report
- View on VirusTotal