by 安全扫描
OpenClaw
安全
high confidenceThe skill's declared purpose (todo management) matches its instructions and it requests no installs, credentials, or privileged access.
评估建议
The skill appears internally consistent and low-risk, but note the source/homepage is unknown and SKILL.md does not state where tasks are stored. Before installing, confirm (1) how your agent will persist task data (local vs. external service), (2) what privacy or retention guarantees exist, and (3) whether you trust the skill owner since no homepage or code repository is provided.详细分析 ▾
✓ 用途与能力
Name, description, and SKILL.md consistently describe a todo/task management skill. There are no unexpected required binaries, env vars, or config paths that would be unrelated to a todo app.
✓ 指令范围
SKILL.md contains only user-facing todo management instructions and a task schema. It does not instruct the agent to read system files, environment variables, call external endpoints, or exfiltrate data.
✓ 安装机制
No install spec and no code files — instruction-only skill with nothing written to disk. This is the lowest-risk install profile.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths. Requested access is proportional (none) to the stated functionality.
ℹ 持久化与权限
always is false and the skill is user-invocable with normal autonomous invocation enabled. This default is not a concern, but you may want to confirm how and where task data is persisted by the hosting agent.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/6
- Changed skill focus from yoga guidance to todo list management. - Updated skill name, description, tags, and features to reflect todo/task management capabilities. - Added documentation for creating, updating, deleting, listing, and organizing tasks. - Included examples and a task schema for clarity. - Removed all previous yoga-related content.
● Pending
安装命令
点击复制官方npx clawhub@latest install too
镜像加速npx clawhub@latest install too --registry https://cn.longxiaskill.com