Lightweight Task Workflow
Facilitates a structured task workflow using a state machine to manage project tasks and statuses effectively.
Install this skill
or
80/100
Security score
The Lightweight Task Workflow skill was audited on Feb 12, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 244
Access to hidden dotfiles in home directory
SourceSKILL.md
| 244 | - This skill's definition files (SKILL.md, CLAUDE.md, README.md) live in `~/.claude/skills/lightweight-task-workflow/` |
medium line 248
Access to hidden dotfiles in home directory
SourceSKILL.md
| 248 | - NEVER read from `~/.claude/skills/lightweight-task-workflow/tasks.md` (that's the skill directory, not the project directory) |
medium line 438
Access to hidden dotfiles in home directory
SourceSKILL.md
| 438 | 3. Read from `./.claude/tasks.md`, NOT `~/.claude/skills/lightweight-task-workflow/tasks.md` |
medium line 442
Access to hidden dotfiles in home directory
SourceSKILL.md
| 442 | - ❌ WRONG: Reading `~/.claude/skills/lightweight-task-workflow/tasks.md` (skill directory) |
Scanned on Feb 12, 2026
View Security Dashboard