Ticktick CLI (Full Edition)

• Analyzed: May 12, 2026, 3:52 AM
• Findings: 1
• Version: 1.0.3
• Hash: 37c990290269ccd1bf143970ef0faacbda0db9a01b82f1cf5916f4e855512dfe
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It is designed to operate the TickTick CLI safely, with explicit instructions in `SKILL.md` requiring user confirmation for installation, environment changes, and destructive operations. It also explicitly forbids printing secrets and improvising custom token exchange scripts. Installation instructions in `references/setup-and-auth.md` recommend isolated virtual environments and standard `pip install` commands for `ticktick-cli`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's security policies.