TickTick API
v1.0.0TickTick task manager integration. List projects and tasks, create new tasks, complete tasks, delete tasks. Use when the user wants to manage their to-do list, add reminders, check pending tasks, or mark tasks as done. Requires OAuth setup via `ticktick-setup`.
⭐ 1· 2.3k·7 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim TickTick task management and the SKILL.md provides OAuth setup and CLI commands that map directly to listing, creating, completing, and deleting tasks via TickTick's Open API. No unrelated services, credentials, or binaries are requested.
Instruction Scope
Runtime instructions are narrowly scoped to creating a TickTick developer app, running a local oauth helper (ticktick-setup), authorizing via the browser, and using a ticktick CLI to call TickTick endpoints. The doc does not instruct reading arbitrary files or other system state. Note: SKILL.md expects the user to run/install the external 'ticktick-setup' and 'ticktick' CLI utilities but does not state their provenance.
Install Mechanism
There is no install spec and no code files; this is instruction-only. That reduces risk because nothing is downloaded or written by the skill itself. The skill does presuppose external CLIs are available but does not install them.
Credentials
The skill declares no required environment variables or credentials. Its OAuth flow is appropriate for the stated purpose. There is no request for unrelated secrets or system config paths.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges. Autonomous invocation is allowed (platform default) but the skill itself has no declared ability to modify other skills or system-wide settings.
Assessment
This skill appears coherent and limited to TickTick task management, but it expects you to have (or to install) two external CLIs: 'ticktick-setup' for OAuth and a 'ticktick' CLI for operations. Before using the skill, verify the origin and integrity of those CLI tools (install from an official source or repository). During setup you'll open a browser and paste a local callback URL — be cautious to only authorize apps you created on developer.ticktick.com. The skill doesn't itself request environment variables, but OAuth tokens will likely be stored by the CLI on your machine; check where those tokens are saved and who can access them.Like a lobster shell, security has layers — review code before you run it.
latestvk978vvtz3zmjs9yhbtwa7jvhvh7zx3fw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.