Todo List for MacOS
ReviewAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward macOS Reminders helper, but it can change or delete iCloud-synced reminders, so destructive actions should be handled carefully.
Before installing, be comfortable granting Reminders automation permission. Use precise reminder names, list matches before delete/complete actions, and remember that changes may sync through iCloud. The artifacts do not show exfiltration or deceptive behavior, but the source metadata has limited provenance.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A vague delete request could remove an unintended reminder.
The delete action searches across reminder lists by substring and deletes the first match. This matches the todo-management purpose, but fuzzy destructive actions can affect the wrong reminder if the request is ambiguous.
repeat with aList in lists ... if name of rem contains searchTitle then ... delete rem
Before deleting or completing items, ask the agent to list matching reminders first or provide the exact reminder title and list.
Granting permission lets the agent-controlled script manage your Reminders data.
The skill requires macOS Automation access to the Reminders app. That is expected for the stated purpose, but it grants the skill ability to read and modify the user's reminders.
Permissions - macOS may request permission to control Reminders on first run, click Allow
Grant the macOS permission only if you want this skill to control Reminders, and revoke it in macOS privacy settings if no longer needed.
Incorrect completions, list creation, or deletions may be reflected across synced devices.
The artifacts disclose that Reminder changes can propagate through iCloud, so a mistaken local action may affect the user's other Apple devices.
Sync - Changes sync to iCloud and appear on other Apple devices
Use extra confirmation for irreversible or broad changes, especially deletions.
You have less upstream provenance to verify, and installation/use on non-macOS systems may fail.
The registry metadata does not provide an upstream source/homepage and does not enforce the macOS-only environment described in SKILL.md. This is not evidence of malicious behavior, but it is a provenance and packaging note.
Source: unknown; Homepage: none; OS restriction: none
Install only if you trust this registry artifact, and use it on macOS with the included script reviewed as needed.