Locu
v1.0.0Manage tasks and projects via Locu's Public API.
⭐ 1· 1.6k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (manage tasks/projects via Locu API) match the required credential and the listed curl calls. Minor note: the skill metadata shows no homepage or source repository, so the publisher cannot be easily verified — that affects trust but not internal coherence.
Instruction Scope
SKILL.md contains explicit curl commands to Locu endpoints (/me, /tasks, /projects) and a harmless instruction to parse JSON output. It does not instruct reading unrelated files, other env vars, or sending data to third-party endpoints.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written to disk.
Credentials
Only LOCU_API_TOKEN is required and declared as the primary credential, which is appropriate for a public-API integration. No unrelated secrets or config paths are requested.
Persistence & Privilege
Skill does not request always:true and is not asking to modify other skills or system-wide settings. It can be invoked autonomously (platform default) but that is not unusual here.
Assessment
This skill appears to do exactly what it claims — call api.locu.app using your LOCU_API_TOKEN. Before installing: (1) confirm the token you supply has the minimal scope needed (prefer a read-only token for testing), (2) store the token securely and avoid pasting long-lived tokens into untrusted places, and (3) consider verifying the publisher (there's no homepage/repo listed) or testing the skill in a sandbox account if you have any doubt about the source.Like a lobster shell, security has layers — review code before you run it.
latestvk977phnewkmknew9pmd3c2zv2980c58e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎯 Clawdis
EnvLOCU_API_TOKEN
Primary envLOCU_API_TOKEN