Moltbot Plugin 2do

v1.0.2

Create tasks and send them to 2Do app via email. Use when the user wants to: (1) add, create, or record a task/todo/reminder in any form - e.g. '添加任务', '创建待办', '新建任务', '加个任务', '记录任务', 'add task', 'create todo'; (2) ask to be reminded of something - e.g. '提醒我', '别忘了', '记得', '帮我记一下', 'remind me', 'remember to'; (3) mention something they need to do and want it tracked - e.g. '明天要开会', '周五前交报告', '下午去买菜'; (4) want to add items to a todo list or task manager - e.g. '加到待办', '放到任务列表', '记到清单里'; (5) describe a task with list/tag organization - e.g. '添加到工作列表', '标签是紧急'; (6) mention urgency or importance - e.g. '紧急', '重要', 'urgent', 'important'. Parses natural language (Chinese and English) to extract task title, due date/time, priority, optional list name, and optional tags, then sends a formatted email to the user's configured 2Do inbox.

1· 1.8k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description align with required items: node and SMTP credentials (TWODO_EMAIL, SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS) are exactly what a mail-to-2Do implementation needs. No unrelated credentials or surprising binaries are requested.
Instruction Scope
SKILL.md instructs running scripts/send-task.sh (which runs the built Node artifact or falls back to npx tsx). Runtime behavior is limited to parsing the user's message and sending email via SMTP to TWODO_EMAIL; it does not read unrelated system files or other env vars. Note: the fallback uses npx tsx which can fetch packages at runtime if a build is not present — building the project first avoids that network fetch.
Install Mechanism
No install spec is provided (lowest install risk). Code and package.json are present and dependencies are standard (nodemailer). There are no downloads from arbitrary URLs or extract steps. The only minor point: the shell wrapper may invoke npx/tsx in dev mode, which can pull code from npm if dependencies are not already installed/built.
Credentials
The skill requires only SMTP connection info and the target TWODO_EMAIL — these are appropriate for sending email. Number and naming of env vars are proportional. The code reads only the declared env vars.
Persistence & Privilege
Skill does not request permanent presence (always:false) and does not try to modify other skills or system-wide configs. It performs ordinary SMTP email sending; autonomous invocation is allowed by platform default but not combined with other concerning privileges.
Assessment
This skill appears to do what it claims: parse natural-language tasks and send them by SMTP to your configured 2Do email. Before installing: 1) Only provide an SMTP account you trust (use an app-specific password where possible) — the skill will send task text to that email/your mail provider. 2) Configure 2Do capture rules (sender or TITLE_PREFIX) to avoid other emails being captured as tasks. 3) Prefer building the package (npm/pnpm install && npm run build) so the script runs the compiled artifact instead of falling back to npx tsx (which may fetch code at runtime). 4) Review the repository/source yourself if you want higher assurance — the registry entry lists no homepage/source URL (source shown as unknown), so verify origin before giving credentials. 5) If you have sensitive task contents, remember they will be transmitted to your SMTP provider and stored according to that provider's policies.

Like a lobster shell, security has layers — review code before you run it.

2dovk97cwg1nys77hr732tk1bfnmzd80efv7emailvk97cwg1nys77hr732tk1bfnmzd80efv7latestvk97akzz3mc8q70y4dphnqeyvq580hwyrproductivityvk97cwg1nys77hr732tk1bfnmzd80efv7taskvk97cwg1nys77hr732tk1bfnmzd80efv7todovk97cwg1nys77hr732tk1bfnmzd80efv7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Clawdis
Binsnode
EnvTWODO_EMAIL, SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS

Comments