Todo List Promax

PassAudited by ClawScan on May 16, 2026.

Overview

This is a coherent personal todo skill, with the main cautions being persistent local storage of todo content/attachments and a daily reminder schedule.

This skill appears safe for a personal todo workflow. Before installing, be comfortable with it saving todo messages and attachments under workspace/todo-list/ and with any optional daily 21:00 reminder job you choose to configure.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI06: Memory and Context Poisoning

What this means

Todo text, original messages, and attached files may remain in the workspace until the user removes them.

Why it was flagged

The skill persistently stores original todo messages and downloaded attachments for future queries and reminders.

Skill content

存储文件 / Storage: `workspace/todo-list/todos.json` ... `source_message`: 原始消息内容 ... 图片/文件：下载到 `workspace/todo-list/attachments/{todoId}_{原文件名}`

Recommendation

Avoid storing highly sensitive content unless you are comfortable with local persistence; periodically review or delete workspace/todo-list/ data if needed.

Low

#ASI10: Rogue Agents

What this means

A reminder job may continue sending daily notifications until it is disabled or removed.

Why it was flagged

The skill describes a recurring scheduled session that proactively reads stored todos and sends reminders.

Skill content

每天 21:00 ... 使用 OpenClaw cron 功能创建每日提醒任务 ... 触发一个 session 读取 todos.json 并筛选未完成项推送

Recommendation

Enable the cron reminder only if you want ongoing proactive notifications, and confirm you know how to disable it.