ClawHub

Remember The Milk

v1.1.0

Manage Remember The Milk tasks — list, add, complete, delete, search, prioritize, tag, move, and annotate tasks with notes. Use when the user asks about tasks, todos, to-do lists, reminders, or Remember The Milk.

⭐ 3· 831·0 current·0 all-time
by@maxdraki
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, declared env vars (RTM_API_KEY, RTM_SHARED_SECRET), and the included script all target the Remember The Milk API. Required credentials are appropriate for the claimed functionality.
✓
Instruction Scope
SKILL.md and the script limit actions to RTM flows (auth, list/tasks CRUD). The only filesystem access is reading/writing ~/.rtm_token; network calls go to api.rememberthemilk.com and www.rememberthemilk.com as documented.
✓
Install Mechanism
Instruction-only skill with one bundled Python script using only the standard library; no download/install steps or external packages are required.
ℹ
Credentials
The two required env vars are expected for RTM. Note that the saved ~/.rtm_token grants full access to the linked RTM account and the auth flow requests 'delete' permission; the SKILL.md also recommends protecting/removing that file.
✓
Persistence & Privilege
The skill is not always-enabled, does not alter other skills or system-wide settings, and its persistent artifact is a per-user token file (~/.rtm_token) which is within scope for an API client.
Assessment
This skill appears to do exactly what it says: manage RTM tasks. Before installing, decide whether to use a dedicated RTM API key/account (so you limit exposure), ensure RTM_API_KEY and RTM_SHARED_SECRET are provided securely via the skill config, and protect or remove the saved token file (~/.rtm_token) (chmod 600 or delete it if you don't want persistent access). Be aware the auth requests 'delete' permission — if you prefer, create a key/account with minimum privileges. If you need higher assurance, inspect the full script yourself; it uses only the standard library and talks only to rememberthemilk.com endpoints.

Like a lobster shell, security has layers — review code before you run it.

latestvk9773thd5f2m75mat9esfga3d9810nx4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🐄 Clawdis
EnvRTM_API_KEY, RTM_SHARED_SECRET

Comments