OmniFocus Automation

Manage OmniFocus tasks, projects, and folders via Omni Automation. Use for task management, to-do lists, project tracking, GTD workflows, adding/completing/editing tasks, setting due dates, managing tags, and recurring tasks. Requires OmniFocus installed on macOS.

Security Scan

The skill’s code and instructions match its stated purpose (controlling OmniFocus on macOS); it requests no credentials and has no installer, but it uses AppleScript/shell execution and comes from an unknown source — review before granting automation permission.

Purpose & Capability

Name/description match the included JXA script which directly manipulates OmniFocus documents, projects, tasks, tags and repeat rules via the OmniFocus Automation APIs. The requested capabilities (task/project/tag manipulations) are consistent with the code and SKILL.md.

Instruction Scope

SKILL.md limits actions to OmniFocus operations and instructs running the bundled script. The implementation uses Application.currentApplication().doShellScript(...) to invoke osascript for AppleScript fallbacks; this is plausible for macOS automation but expands the set of operations the script can perform (shell and AppleScript execution). There are no instructions to read unrelated files or send data externally, but the use of shell/osascript means a malicious modification could execute arbitrary local commands — so inspect the AppleScript snippets in the code before trusting.

Install Mechanism

No install spec is provided (instruction-only with a bundled script), so nothing is downloaded or written by an installer. This lowers supply-chain risk; the only code is the included script.

Credentials

The skill declares no environment variables, no credentials, and no config paths. That is proportionate for a local OmniFocus automation utility.

Persistence & Privilege

The skill is not marked always:true and is user-invocable. It does not request persistent system-wide privileges in the metadata. It will require the user to grant macOS Automation access to OmniFocus (normal for this use case).

Assessment

This skill appears to do what it says: control OmniFocus via macOS automation. Before installing or running it, review the full scripts (scripts/omnifocus.js) yourself or have someone you trust inspect them. Pay attention to the AppleScript snippets executed via doShellScript/osascript (those can run shell commands). Only grant macOS Automation permissions to this script if you trust the source. Note that the package has no homepage and an unknown source/owner — lack of provenance increases risk; prefer skills from known authors or with a public repo you can inspect. If you need extra safety, run the script on a machine/profile with limited data or copy your OmniFocus data for backup before use.

OmniFocus

Control OmniFocus via JXA (JavaScript for Automation).

Requirements

• macOS with OmniFocus 3 or 4 installed
• OmniFocus must be running (or will auto-launch)

Quick Reference

# Run via the wrapper script
./scripts/of <command> [args...]

# Or directly
osascript -l JavaScript ./scripts/omnifocus.js <command> [args...]

Commands

List/Query

Command	Description
inbox	List inbox tasks
folders	List all folders
projects [folder]	List projects, optionally filtered by folder
tasks <project>	List tasks in a project
tags	List all tags
today	Tasks due today or overdue
flagged	Flagged incomplete tasks
search <query>	Search tasks by name
info <taskId>	Full task details

Create

Command	Description
add <name> [project]	Add task to inbox or project
newproject <name> [folder]	Create project
newfolder <name>	Create top-level folder
newtag <name>	Create or get tag

Modify

Command	Description
complete <taskId>	Mark complete
uncomplete <taskId>	Mark incomplete
delete <taskId>	Permanently delete
rename <taskId> <name>	Rename task
note <taskId> <text>	Append to note
setnote <taskId> <text>	Replace note
defer <taskId> <date>	Set defer date (YYYY-MM-DD)
due <taskId> <date>	Set due date
flag <taskId> [true|false]	Set flagged
tag <taskId> <tag>	Add tag (creates if needed)
untag <taskId> <tag>	Remove tag
move <taskId> <project>	Move to project

Repeat

# repeat <taskId> <method> <interval> <unit>
of repeat abc123 fixed 1 weeks
of repeat abc123 due-after-completion 2 days
of repeat abc123 defer-after-completion 1 months
of unrepeat abc123

Methods: fixed, due-after-completion, defer-after-completion
Units: days, weeks, months, years

Output Format

All commands return JSON. Success responses include "success": true. Errors include "error": "message".

{
  "success": true,
  "task": {
    "id": "abc123",
    "name": "Task name",
    "note": "Notes here",
    "flagged": false,
    "completed": false,
    "deferDate": "2026-01-30",
    "dueDate": "2026-02-01",
    "project": "Project Name",
    "tags": ["tag1", "tag2"],
    "repeat": {"method": "fixed", "rule": "RRULE:FREQ=WEEKLY;INTERVAL=1"}
  }
}

Examples

# Add task to inbox
of add "Buy groceries"

# Add task to specific project
of add "Review docs" "Work Projects"

# Set due date and flag
of due abc123 2026-02-01
of flag abc123 true

# Add tags
of tag abc123 "urgent"
of tag abc123 "home"

# Create recurring task
of add "Weekly review" "Habits"
of repeat xyz789 fixed 1 weeks

# Search and complete
of search "groceries"
of complete abc123

# Get today's tasks
of today

Notes

• Task IDs are OmniFocus internal IDs (returned in all task responses)
• Dates use ISO format: YYYY-MM-DD
• Project and folder names are case-sensitive
• Tags are created automatically if they don't exist when using tag command
• All output is JSON for easy parsing

Technical Details

This skill uses JavaScript for Automation (JXA) for most operations, with AppleScript fallbacks for tag and repeat operations (due to known JXA type conversion bugs with these specific OmniFocus APIs).

The hybrid approach provides:

• JSON output for easy parsing
• Robust escaping for special characters in tag names
• Error handling with clear messages

First run: OmniFocus may prompt to allow automation access. Enable this in System Settings > Privacy & Security > Automation.