Superset Agent Standup
superset-sh/superset
Sweeps every Superset workspace, task and agent terminal to report what finished, what needs review and what is blocked, read-only, and can publish the digest as a page.
Secure TODO tracker with input validation and safe file operations.
Install Todo Tracker Safe
$ npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install LeoYeAI/openclaw-master-skills todo-tracker-safe --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/todo-tracker-safe .claude/skills/todo-tracker-safe && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "todo-tracker-safe" agent skill from https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safe into .claude/skills/todo-tracker-safe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "todo-tracker-safe", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safeType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install LeoYeAI/openclaw-master-skills todo-tracker-safe --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/todo-tracker-safe .agents/skills/todo-tracker-safe && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "todo-tracker-safe" agent skill from https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safe into .agents/skills/todo-tracker-safe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "todo-tracker-safe", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install LeoYeAI/openclaw-master-skills todo-tracker-safe --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/todo-tracker-safe .cursor/skills/todo-tracker-safe && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "todo-tracker-safe" agent skill from https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safe into .cursor/skills/todo-tracker-safe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "todo-tracker-safe", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/LeoYeAI/openclaw-master-skills.git --path skills/todo-tracker-safe--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install LeoYeAI/openclaw-master-skills todo-tracker-safe --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/todo-tracker-safe .gemini/skills/todo-tracker-safe && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "todo-tracker-safe" agent skill from https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safe into .gemini/skills/todo-tracker-safe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "todo-tracker-safe", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install LeoYeAI/openclaw-master-skills todo-tracker-safeInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/todo-tracker-safe .github/skills/todo-tracker-safe && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "todo-tracker-safe" agent skill from https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safe into .github/skills/todo-tracker-safe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "todo-tracker-safe", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install LeoYeAI/openclaw-master-skills todo-tracker-safe --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/todo-tracker-safe .opencode/skills/todo-tracker-safe && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "todo-tracker-safe" agent skill from https://github.com/LeoYeAI/openclaw-master-skills/tree/main/skills/todo-tracker-safe into .opencode/skills/todo-tracker-safe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "todo-tracker-safe", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
todo-tracker-safe- GitHub stars
- 2.2k
- Token cost
- ~303 tokens
- SKILL.md length
- 78 words
- Files
- 5 (incl. scripts)
- Skills in repo
- 1,235
- Repo updated
- First seen
- Licence
- MIT
At a glance
Secure TODO tracker with input validation and safe file operations.
- Works in 6 steps: 输入验证 - 所有用户输入经过 sanitize_input() 过滤 → 固定字符串匹配 - 使用 grep -F 避免正则注入 → 文件权限检查 - 验证 TODO 文件权限不过于宽松 → …
- Task management across sessions
- SKILL.md covers 安全改进, 用法, 配置 and 触发条件, plus 1 more section
- Runs Shell scripts from its folder
What it does
Todo Tracker Safe is an agent skill from LeoYeAI/openclaw-master-skills. Secure TODO tracker with input validation and safe file operations. Use for task management across sessions.
Its SKILL.md is about 300 tokens, which your agent loads only when the skill is triggered. The skill folder holds 6 other files, including scripts (for example `.clawhub/origin.json`, `README.md` and `_meta.json`).
It sits in Productivity & Automation, covering Task management. The repository describes itself as: 🧠 Curated collection of 1209+ best OpenClaw skills — weekly updated by MyClaw.ai. The licence is MIT.
When your agent uses it
- Task management across sessions
- Tasks that involve Task management
Example prompts
- “/todo-tracker-safe”
Requirements
- A Bash shell
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- 输入验证 - 所有用户输入经过 sanitize_input() 过滤
- 固定字符串匹配 - 使用 grep -F 避免正则注入
- 文件权限检查 - 验证 TODO 文件权限不过于宽松
- 无动态执行 - 不使用 eval 或命令替换执行用户输入
- 错误处理 - 使用 set -euo pipefail 严格模式
- 长度限制 - 输入限制为 200 字符
What it can do on your machine
Read from SKILL.md and the folder at commit e5199b5. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Shell), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Todo Tracker Safe loads about 303 tokens when it runs. Until then it costs about 32 tokens; SKILL.md has 78 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from LeoYeAI/openclaw-master-skills at commit e5199b5, republished under its MIT licence (© LeoYeAI). 78 words, ~303 tokens.
Download SKILL.mdSave it as
.claude/skills/todo-tracker-safe/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.- name
- todo-tracker-safe
- description
- Secure TODO tracker with input validation and safe file operations. Use for task management across sessions.
- homepage
- https://github.com/openclaw/openclaw
📋 TODO Tracker (安全版本)
安全的跨会话任务追踪工具，带有输入验证和安全文件操作。
安全改进
相比原始版本，此版本包含以下安全增强：
- 输入验证 - 所有用户输入经过
sanitize_input()过滤 - 固定字符串匹配 - 使用
grep -F避免正则注入 - 文件权限检查 - 验证 TODO 文件权限不过于宽松
- 无动态执行 - 不使用
eval或命令替换执行用户输入 - 错误处理 - 使用
set -euo pipefail严格模式 - 长度限制 - 输入限制为 200 字符
用法
# 添加任务
todo.sh add high "完成项目报告"
todo.sh add medium "回复邮件"
todo.sh add low "整理文件"
# 标记完成
todo.sh done "项目报告"
# 删除任务
todo.sh remove "整理文件"
# 列出任务
todo.sh list # 全部
todo.sh list high # 高优先级
todo.sh list done # 已完成
# 摘要（用于 heartbeat）
todo.sh summary配置
TODO_FILE- 自定义 TODO 文件路径（默认：~/.openclaw/workspace/TODO.md）
触发条件
当用户说：
- "添加到 TODO" / "add to TODO"
- "标记 X 完成" / "mark X done"
- "TODO 列表" / "TODO list"
- "还有什么任务" / "what's on the TODO"
- 心跳时自动显示摘要
安全审计
- ✅ 无外部 API 调用
- ✅ 无网络请求
- ✅ 无环境变量读取（除 TODO_FILE）
- ✅ 无动态代码执行
- ✅ 输入经过严格过滤
- ✅ 文件操作有权限检查
© LeoYeAI, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 4 other files (scripts) in skills/todo-tracker-safe of LeoYeAI/openclaw-master-skills.
- SKILL.md
- .clawhub/origin.json
- README.md
- _meta.json
- scripts/todo.sh
Open the folder on GitHubat commit e5199b5
Compare with similar skills
Todo Tracker Safe next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Todo Tracker Safe this skillLeoYeAI/openclaw-master-skills | 2.2k | — | ~303 | Automated safety check: Pass | MIT | |
| Superset Agent Standupsuperset-sh/superset | 15k | — | ~712 | Automated safety check: Pass | Custom licence | |
| AgentRQ Workspace Agentagentrq/agentrq | 1.1k | — | ~1.9k | Automated safety check: Pass | AGPL-3.0 | |
| Markdown Task Managerioniks/MarkdownTaskManager | 535 | — | ~2.2k | Automated safety check: Pass | MPL-2.0 | |
| Pi Messenger Crewnicobailon/pi-messenger | 720 | — | ~3.7k | Automated safety check: Pass | None | |
| Codekanban CLIfy0/CodeKanban | 225 | — | ~2.7k | Automated safety check: Pass | Apache-2.0 |
Similar skills
AgentRQ Workspace Agent
agentrq/agentrq
Guides a workspace agent through executing assigned tasks, replying to a remote human operator, and creating sub-tasks, memory and events inside an AgentRQ workspace.
Markdown Task Manager
ioniks/MarkdownTaskManager
A skill your agent uses when managing tasks, the system is a Kanban task manager based on local Markdown files (kanban.md and archive.md).
Pi Messenger Crew
nicobailon/pi-messenger
Orchestrator reference for pi-messenger Crew planning, task management, configuration, and agent coordination.
Codekanban CLI
fy0/CodeKanban
Operate CodeKanban workflows, terminal sessions, and web sessions through the installable codekanban-cli command.
Kanban Video Orchestrator
Luciole-Studio/Misaka-Agent
Plan and run multi-agent video production pipelines. An agent skill from Luciole-Studio/Misaka-Agent.
More from LeoYeAI/openclaw-master-skills
All 1,235 skills in this repoDevOps Pipeline Management
LeoYeAI/openclaw-master-skills
Manages pipelines on a DevOps quality and efficiency platform through its OpenAPI: list workspaces and templates, create, update, run and cancel pipelines, and read run records.
Feishu Document Collaboration
LeoYeAI/openclaw-master-skills
Patches OpenClaw's Feishu extension so an edited document triggers an isolated agent session that reads the doc and replies inline, turning it into a live chat space.
Files Memory System
LeoYeAI/openclaw-master-skills
Multi-context memory management system for OpenClaw agents with group-isolated storage, global shared memory, workspace organization, and group-specific skills isolation.
GEO-Claw AI Visibility Agent
LeoYeAI/openclaw-master-skills
Runs a brand's AI-search visibility work end to end: diagnosing how AI platforms represent it, repositioning it, producing AI-optimized content and monitoring ongoing mentions.
Google Workspace CLI
LeoYeAI/openclaw-master-skills
Installs and authenticates the gws CLI, then automates Gmail, Drive, Sheets, Calendar, Docs, Chat and Tasks with ready-made recipes, persona bundles and security audits.
HealthFit Health Advisors
LeoYeAI/openclaw-master-skills
Runs four advisor roles, a fitness coach, nutritionist, data analyst and TCM practitioner, to build a health profile and track workouts, diet and wellness over time.
Related
Categories
Questions about Todo Tracker Safe
What does Todo Tracker Safe do?
Secure TODO tracker with input validation and safe file operations. Todo Tracker Safe is an agent skill from LeoYeAI/openclaw-master-skills. Secure TODO tracker with input validation and safe file operations.
When should I use Todo Tracker Safe?
Todo Tracker Safe fits situations like: task management across sessions; tasks that involve Task management.
How do I install Todo Tracker Safe in Claude Code?
Run `npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a claude-code`. Or copy the skill folder (skills/todo-tracker-safe in LeoYeAI/openclaw-master-skills) into .claude/skills/todo-tracker-safe in your project. Claude Code loads it when a task matches its description.
How do I install Todo Tracker Safe in Codex?
Run `npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a codex`. Or copy the skill folder (skills/todo-tracker-safe in LeoYeAI/openclaw-master-skills) into .agents/skills/todo-tracker-safe in your project. Codex loads it when a task matches its description.
Can I use Todo Tracker Safe in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add LeoYeAI/openclaw-master-skills --skill todo-tracker-safe -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/todo-tracker-safe, .gemini/skills/todo-tracker-safe, .github/skills/todo-tracker-safe and .opencode/skills/todo-tracker-safe in your project.
What does Todo Tracker Safe need to run?
Going by SKILL.md and its folder, Todo Tracker Safe needs a shell for the scripts in its folder. Our summary lists: A Bash shell.
Does Todo Tracker Safe access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Todo Tracker Safe safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Todo Tracker Safe use?
Todo Tracker Safe is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Todo Tracker Safe use?
About 303 tokens (SKILL.md is roughly 1.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Todo Tracker Safe?
Skills that share tags, products or a category with Todo Tracker Safe: Superset Agent Standup (superset-sh/superset, 15k stars), AgentRQ Workspace Agent (agentrq/agentrq, 1.1k stars), Markdown Task Manager (ioniks/MarkdownTaskManager, 535 stars) and Pi Messenger Crew (nicobailon/pi-messenger, 720 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Todo Tracker Safe?
LeoYeAI (a GitHub user) maintains it in LeoYeAI/openclaw-master-skills, which has 2,160 GitHub stars. The repository holds 1,235 skills in this directory. The repository was last updated on July 20, 2026.
Source: LeoYeAI/openclaw-master-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.