Security audit
Todoist
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Todoist integration wrapper that discloses OAuth connection to Todoist's MCP service and does not include local executable code or hidden agent instructions.
Install this only if you want OpenClaw to connect to your Todoist account through OAuth and let agents manage your tasks and projects. The local wrapper looks minimal and coherent, but the remote MCP service and its future tool behavior are outside the packaged files scanned here.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.