TickTick Tasks

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent TickTick task-management skill, but users should verify the external TickTick CLI before authorizing it because it can change or delete tasks.

This skill appears purpose-aligned for managing TickTick tasks. Before installing or using it, make sure the `ticktick` and `ticktick-setup` commands come from a trustworthy source, authorize only the TickTick app you created, and review any complete or delete action before approving it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Authorizing the CLI may let it read and modify TickTick tasks according to the OAuth permissions granted.

Why it was flagged

The setup flow asks the user to provide OAuth app credentials and authorize access to TickTick, which is expected for this integration but grants account-level access to the task service.

Skill content
ticktick-setup <client_id> <client_secret>
Recommendation

Only authorize an app and CLI source you trust, and revoke the TickTick OAuth grant if you stop using the skill.

What this means

A mistaken command or wrong task ID could mark the wrong task complete or delete it.

Why it was flagged

The documented commands can complete or delete tasks in the user's TickTick account. This is purpose-aligned, but it is still a mutating action.

Skill content
ticktick complete <project_id> <task_id>

ticktick delete <project_id> <task_id>
Recommendation

Review task and project IDs before approving complete or delete operations, especially for important tasks.

What this means

Users need to obtain the CLI separately, so trust depends on the provenance of whatever `ticktick` command is installed locally.

Why it was flagged

The skill tells users to run `ticktick-setup` and `ticktick` commands, but the artifacts do not provide the command implementation, package source, or pinned installation path.

Skill content
No install spec — this is an instruction-only skill.
Recommendation

Install the TickTick CLI only from a trusted source and verify which executable will run before entering OAuth credentials.