Todoist Manager

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0957a217a5becbe4211ecc026ce2e556aa4bc1e4a8788351590d1b9bfc959297
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear instructions for setting up a Todoist API token as an environment variable and using a local CLI wrapper for Todoist management. There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the agent to perform actions outside the stated purpose. The mentioned dependencies (`curl`, `jq`) are standard tools for API interaction and JSON processing, aligning with the skill's functionality.