tasktodolist

Manage multiple independent to-do lists with commands to add, list, complete, remove, clear tasks, and manage task lists by name.

Security Scan

This skill is a simple local CLI todo manager that stores JSON files under ~/.tasktodolist and does not request credentials or make network calls — its code and documentation are consistent with that purpose.

Purpose & Capability

The name and description match the code and SKILL.md: the tool manages multiple named todo lists and stores them as JSON files under ~/.tasktodolist. The declared dependency (commander) is appropriate. Minor metadata mismatch: registry version is 1.0.1 while package.json lists 1.0.0 — likely benign but worth noting.

Instruction Scope

SKILL.md instructions precisely describe the CLI behavior and the storage path. The included src/index.js implements only local file I/O (create/read/write/unlink) under BASE_DIR and standard CLI commands; it does not read other system files, environment variables, or send data externally.

Install Mechanism

No remote download/install URLs are used. Installation is standard npm (local or global). package.json includes a postinstall step to chmod the script (chmod +x src/index.js), which is plausible/normal for a CLI package but should be inspected before running.

Credentials

The skill requests no environment variables, no credentials, and no config paths beyond creating files under the user's home directory. There are no tokens or secrets referenced.

Persistence & Privilege

always:false (default) and the skill does not modify other skills or system-wide agent settings. Global npm install will add a binary to PATH (expected for CLIs) and the tool creates files in the user's home directory — both are proportionate to its purpose.

Assessment

This appears to be a straightforward local todo CLI. Before installing: (1) verify the package source you are installing from (the registry metadata owner is shown but there's no homepage); (2) inspect package.json and src/index.js (the package runs a harmless postinstall chmod and installs a CLI binary when installed globally); (3) be aware that todos are stored as plain JSON under ~/.tasktodolist — do not store sensitive secrets there; (4) if uncomfortable with global install, run npm install locally and review files before running; (5) the version number discrepancy (registry 1.0.1 vs package.json 1.0.0) is likely minor but worth confirming with the publisher.

tasktodolist Skill

描述

一个简单的待办事项管理 Skill，支持以下操作。可以通过 -t, --task <name> 参数来指定不同的任务名称，从而维护多个互相独立的待办列表。

• tasktodolist --task <name> add <内容>
• tasktodolist --task <name> list
• tasktodolist --task <name> done <序号>
• tasktodolist --task <name> rm <序号>
• tasktodolist --task <name> clear
• tasktodolist tasks list（列出所有任务列表）
• tasktodolist tasks rm <名称>（删除指定的任务列表）

使用方法

在终端运行 tasktodolist [全局参数] <子命令> [参数]。数据保存在用户家目录下的 ~/.tasktodolist/<task_name>_tasktodolist.json，如果未指定任务名称，默认使用 ~/.tasktodolist/default_tasktodolist.json。

安装

• 本地依赖: npm install
• 全局安装 (推荐): 在该项目目录下运行 npm install -g .。安装后，你可以直接在任何地方运行 tasktodolist 命令。

依赖

commander（CLI 框架）