Dida365
v1.0.0Use when the user wants to interact with TickTick/Dida365 (滴答清单) — managing tasks, projects, and to-dos, checking productivity stats, completing tasks, searc...
⭐ 0· 125·1 current·1 all-time
byCheng@huangcheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description match the SKILL.md: it documents task queries and task management operations and maps them to mcp__dida__* tools. There are no unrelated binaries, services, or install steps requested.
Instruction Scope
The instructions only call predefined MCP tool names (e.g., mcp__dida__create_task, list_undone_tasks_by_date) and provide example payloads. They do not instruct reading arbitrary files, environment variables, or sending data to unexpected external URLs. Note: the SKILL.md tells the agent to invoke the skill whenever TickTick/Dida365 or related concepts are mentioned (including implicit mentions), which is an aggressive auto-invocation policy — not malicious, but broad in scope.
Install Mechanism
No install spec and no code files — instruction-only. Nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables or primary credential. This is plausible for an MCP-based connector where the platform provides authentication, but it is a gap in the skill metadata: accessing a user's TickTick/Dida365 account normally requires credentials or an OAuth token. Confirm how the platform supplies account credentials/consent before enabling.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent installation or system-level changes. Model invocation is allowed (default) which, combined with the broad invocation rule in SKILL.md, means the agent could call the skill autonomously when relevant — acceptable but worth noting.
Assessment
This skill is instruction-only and appears to be a straightforward wrapper around platform MCP connectors for TickTick/Dida365. Before installing, verify how your platform supplies authentication to these mcp__dida__* tools (OAuth token or connector permission). Make sure the connector only has the minimal permissions it needs (read/write tasks) and that you are comfortable with the skill's directive to auto-invoke whenever task-management-related phrases appear. If you want tighter control, request that the skill be invoked only on explicit user command and confirm there are no hidden install steps or external URLs supplying code.Like a lobster shell, security has layers — review code before you run it.
latestvk973cjxeg1mj89ew8abk55xdz1833v9e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.