ClawHub

Todoist Natural Language

v1.0.8

Integrate with Todoist task management using natural language. Use when the user wants to manage Todoist tasks or projects through conversational commands li...

⭐ 3· 2.4k·3 current·3 all-time
byArt Mills@hail2skins
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, SKILL.md, README, skill.json, and the included Python client all align: this is a Todoist client that needs a Todoist API token. The code talks directly to api.todoist.com and the Sync API when needed, which is appropriate for the claimed features.
✓
Instruction Scope
Runtime instructions and CLI usage only reference the Todoist API, the TODOIST_API_KEY env var, and optional TZ. The SKILL.md does not instruct reading unrelated files, other credentials, or exfiltrating data to third-party endpoints; behavior stays within the described scope.
✓
Install Mechanism
No install spec is provided (instruction-only), and included files are Python and docs. There are no downloads from arbitrary URLs or archive extraction steps. README suggests manual copy/CLI usage which is low-risk.
✓
Credentials
The only required secret is TODOIST_API_KEY (declared in SKILL.md and skill.json) and optional TZ for timezone handling. These are proportional to a Todoist integration; no unrelated secrets or config paths are requested.
✓
Persistence & Privilege
The skill does not request always:true and contains no install hooks that modify other skills or global configs. It runs as an on-demand skill or CLI script and does not demand elevated persistent privileges.
Assessment
This skill appears to do exactly what it claims: it will send requests to api.todoist.com and the Todoist Sync endpoint using the TODOIST_API_KEY you provide. Before installing, ensure you are comfortable granting the Todoist API token (it can create, update, complete, and delete tasks). Review the included scripts yourself if you want to confirm behavior, avoid running installs as root, and keep your API token scoped/rotated according to your Todoist account security practices.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dmm88psg27t4skf0g216qrh81jegv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments