TickTick API

• Analyzed: May 15, 2026, 3:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: b2d6c654e0ec2db93890e987cabe8a429fa956d09cde5750bbbde5efc706d7d0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It consists of metadata and a markdown file describing an integration with the TickTick API. The `SKILL.md` provides setup instructions for OAuth (using a local redirect URI `http://127.0.0.1:8765/callback`) and usage examples for a hypothetical `ticktick` CLI tool. There is no executable code, no prompt injection attempts against the agent, and no evidence of data exfiltration, malicious execution, or persistence mechanisms within the provided files. The skill relies on external commands (`ticktick-setup`, `ticktick`) whose implementations are not part of this bundle.